https://signal-and-syntax.com/tags/passwords/Recent content in Passwords on Signal & SyntaxHugoen-usMon, 17 Nov 2025 06:00:00 -0700https://signal-and-syntax.com/posts/hash-collisions/Mon, 17 Nov 2025 06:00:00 -0700https://signal-and-syntax.com/posts/hash-collisions/In 2017, Google researchers generated two different PDF files with identical SHA-1 hashes, finally proving what cryptographers had warned about for years: hash functions don’t create truly unique fingerprints ( Stevens et al., 2017 ). This “SHAttered” attack required 9 quintillion SHA-1 computations, which is the equivalent to 6,500 years of single-CPU computation. The attack cost approximately $45,000 in cloud computing resources, making it accessible to well-funded adversaries but not casual attackers.