Hacker News new | ask | show | jobs
by AYBABTME 3393 days ago
Short story: because its role as a crypto hash function is sort of obsolete given that it's been proven to be broken, and faster, more secure alternatives exist.

But for all practical purposes, SHA1 isn't about to disappear. MD5 has been shown to be broken since forever and people still write new code using it today.
1 comments
hvidgaard 3393 days ago
The thing with SHA-1 is that we know (and have known for a decade) that is not a good cryptographic hash function. It is still, along with MD5, a good hash function if you control the input, i.e. in a hash table.
link
AYBABTME 3392 days ago
There are better functions than SHA1 to use for hash tables. Candid question: really what is the use for MD5/SHA1 these days?
link
hvidgaard 3392 days ago
Yes, but those are widely implemented and thus available more or less everywhere. I'd rather use a slightly less ideal hash function, than use an untested one.
link