SHA-1
14
MENTIONS
10
EPISODES
9
PODCASTS
Search complete. 14 mentions across 10 episodes found for "SHA-1".
Sep 10, 2026
Len NgoGUEST
So this chip is FIPS compliant.
Len NgoGUEST
It can do HMAC SHA-1.
Len NgoGUEST
It can do OTP.
Len NgoGUEST
It can do GP.
W. Curtis PrestonHOST
Is it the case that given that this project has been running for 15 years and given the fact that they have to support, for lack of a better word, so many different systems that they have to do this password for every different system that they support, Can we assume that they haven't gotten very far in terms of length of passwords?
Mike SaylorGUEST
Doing some research on the Rainbow Tables project, their hashing activities include LM, NTLM, so Landman, NTLandman, MD5, SHA-1, and they're currently only up to password length of 10 characters.
Mike SaylorGUEST
And having done all of that, the database is currently at just over 20 terabytes.
Mike SaylorGUEST
20 terabytes of text file.
Mike SaylorGUEST
They've yet to really expand that.
Mike SaylorGUEST
Let's see.
Mike SaylorGUEST
Common hashes, MD5 SHA-1, SHA-256, and SHA-512
W. Curtis PrestonHOST
is
Tim de HerreraGUEST
And it's really not the shape of what you would want it to be because of two reasons.
Tim de HerreraGUEST
First of all, it's just the practical reason of Git uses SHA-1.
Tim de HerreraGUEST
for its hashes right now.
Tim de HerreraGUEST
It does have SHA-256 support, but SHA-1 is still the most common.
Tim de HerreraGUEST
And that is just not a cryptographically secure algorithm, which just means that in the simplest possible sense, there are mathematically feasible attacks where you could replace content without changing the hash, right? In terms of how practical that is for an actual attack, it's still probably not very likely, but it's nonetheless, it's not something security-minded people are very happy about, first of all.
Tim de HerreraGUEST
But the other reason is because Git signing is attached to the commit boundary, and we're actually only needing to work one level lower than that at the tree.
Bobby CapucciHOST
J. Deduplicate prior to production.
Bobby CapucciHOST
To the extent that exact duplicate documents based on MD5 or SHA-1 hash values at the document level reside within the party's dataset, each party is only required to produce a single copy of a responsive document so long as there is a data field which identifies each custodian who had a copy.
Bobby CapucciHOST
In addition, documents may be deduplicated in such a way as to eliminate earlier or incomplete chains of emails and produce only the most complete iteration of an email chain so long as there is a data field that identifies each custodian who had a copy.
Bobby CapucciHOST
4.
Eddie Montes TravisHOST
On September 22, chaos for anyone who didn't prepare.
Eddie Montes TravisHOST
All legacy cryptography, algorithms like SHA-1 for signatures or RSA-1024 keys, are officially banned for federal and financial sector transactions.
Marylyn Lee TrotterHOST
Banned.
Marylyn Lee TrotterHOST
Wow.
AmitHOST
Git is essentially a content addressable data store.
AmitHOST
Every blob, tree, and commit is keyed by an SHA-1 hash of its contents.
YuvalHOST
That sounds like it would map perfectly to a distributed key value store.
YuvalHOST
You use the SHA-1 as the key, and the actual object as the value.
YuvalHOST
That could provide a clean way to scale out.
AmitHOST
It sounds elegant, but it falls apart in practice.
Chris BrandoHOST
I mean, they were gonna put under crypto, right? So that tells you that they didn't really understand UUIDs.
Chris BrandoHOST
They also, you know, were like, "SHA i- SHA-1 is insecure." And it's like, not for this use case.
Chris BrandoHOST
It's broken in a very particular use case that's over there.
Chris BrandoHOST
This is, this is a different one, which also is why it shouldn't go under crypto.
Ellen BoehmGUEST
We've been building them into our products so that we can issue a post-quantum certificate that is based around this new math.
Ellen BoehmGUEST
And so from what we've seen, that is... yes, I guess you could maybe relate it to how we migrated things in the past from like SHA-1 to SHA-2.
Ellen BoehmGUEST
It's kind of a similar, and I've heard my CTO talk about this, that took decades.
Ellen BoehmGUEST
So now if we're talking about migrating RSA or ECC, which is today's classical algorithms, pretty solid, right? But not when the PQC computer has that capability.
Ellen BoehmGUEST
We've been building them into our products so that we can issue a post-quantum certificate that is based around this new math.
Ellen BoehmGUEST
And so from what we've seen, that is... yes, I guess you could maybe relate it to how we migrated things in the past from like SHA-1 to SHA-2.
Ellen BoehmGUEST
It's kind of a similar, and I've heard my CTO talk about this, that took decades.
Ellen BoehmGUEST
So now if we're talking about migrating RSA or ECC, which is today's classical algorithms, pretty solid, right? But not when the PQC computer has that capability.
Eddie Montes TravisHOST
Option A: Enable data compression to optimize speed and maintain support for legacy RC4 cipher suites to ensure maximum backwards compatibility.
Eddie Montes TravisHOST
Option B: Restrict all network connections to the TLS 1.0 protocol utilizing SHA-1 hashing algorithms.
Marylyn Lee TrotterHOST
Option C: Enforce TLS 1.2 as the absolute minimum baseline, require full support for TLS 1.3, strictly utilize RSA 2048 or ECDSA P256 cryptographic keys, and absolutely disable all PLS data compression.
Marylyn Lee TrotterHOST
Or option D, route the heavy video stream over unencrypted HTTP protocols to conserve bandwidth, reserving TLS encryption exclusively for the final payment gateway.