The National Institute of Standards and Technology (NIST) has recognized the hashing algorithm as obsolete, no longer meeting security requirements and not recommended for use. The use of SHA-1 is planned to be eliminated by December 31, 2030, with a complete transition to more secure algorithms SHA-2 and SHA-3.
By December 31, 2030, the application of SHA-1 will be discontinued in all current specifications and protocols by NIST. The phasing out of the SHA-1 specification will be reflected in the new federal standard FIPS 180-5. Additionally, changes will be made to related specifications, such as SP 800-131A, which will remove references to SHA-1. Cryptographic modules that support SHA-1 will not pass the next review by NIST, making their supply to U.S. government institutions impossible (certification is given only for five years, after which recertification is required).
SHA-1 was developed in 1995 and approved as a federal information processing standard (FIPS 180-1), allowing its use in U.S. government institutions. In 2005, a theoretical attack on SHA-1 was proven possible. In 2017, the first practical collision attack with a chosen prefix was demonstrated for SHA-1, allowing for two different sets of data to find extensions that would cause a collision and produce the same resulting hash (for example, for two existing documents, extensions can be computed such that if one is attached to the first document and the other to the second, the resulting SHA-1 hashes for these files will be identical).
In 2019, the method for detecting collisions was significantly improved, reducing the cost of launching an attack to just tens of thousands of dollars. In 2020, a working attack was demonstrated to create forged digital signatures for PGP and GnuPG. Since 2011, SHA-1 has not been recommended for use in digital signatures, and by 2017, all major web browsers ceased to support certificates issued using the SHA-1 hashing algorithm. Nevertheless, SHA-1 continues to be used for checksums, and there are over 2,200 certified cryptographic modules and libraries supporting SHA-1 in the NIST database.
Source: opennet.ru
