{"id":106131,"date":"2022-12-16T15:36:53","date_gmt":"2022-12-16T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij"},"modified":"2022-12-16T15:36:53","modified_gmt":"2022-12-16T13:36:53","slug":"nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij","title":{"rendered":"NIST is deprecating the SHA-1 hashing algorithm from its specifications","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The National Institute of Standards and Technology (NIST) has recognized the hashing algorithm as obsolete, no longer meeting security requirements and not recommended for use. The use of SHA-1 is planned to be eliminated by December 31, 2030, with a complete transition to more secure algorithms SHA-2 and SHA-3. <\/p>\n
By December 31, 2030, the application of SHA-1 will be discontinued in all current specifications and protocols by NIST. The phasing out of the SHA-1 specification will be reflected in the new federal standard FIPS 180-5. Additionally, changes will be made to related specifications, such as SP 800-131A, which will remove references to SHA-1. Cryptographic modules that support SHA-1 will not pass the next review by NIST, making their supply to U.S. government institutions impossible (certification is given only for five years, after which recertification is required). <\/p>\n
SHA-1 was developed in 1995 and approved as a Federal Information Processing Standard (FIPS 180-1), allowing the algorithm to be used in US government agencies. In 2005, the theoretical possibility of an attack on SHA-1 was demonstrated. In 2017, the first practical collision attack with a predefined prefix was demonstrated for SHA-1, allowing for two different data sets to find extensions that would lead to a collision and the generation of the same resulting hash (for instance, for two existing documents, one could compute two extensions, and if one is attached to the first document and the other to the second, the resulting SHA-1 hashes for these files would be identical). <\/p>\n
In 2019, the method for detecting collisions was significantly improved, reducing the cost of launching an attack to just tens of thousands of dollars. In 2020, a working attack was demonstrated to create forged digital signatures for PGP and GnuPG. Since 2011, SHA-1 has not been recommended for use in digital signatures, and by 2017, all major web browsers ceased to support certificates issued using the SHA-1 hashing algorithm. Nevertheless, SHA-1 continues to be used for checksums, and there are over 2,200 certified cryptographic modules and libraries supporting SHA-1 in the NIST database. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"