About

SHA-1 is a cryptographic function that is no longer considered secure and should only be used for backward compatibility.

In 2006, NIST issued a policy stating that:

"Federal agencies should stop using SHA-1 ... as soon as practical, and must use the SHA-2 family of hash functions for these applications after 2010."

As of 2012, NIST now recommends that new applications should use either or the new hash function instead of SHA-1.

Even with its weaknesses, SHA-1 is a significantly better hash than . No actual collisions have yet been found on the full SHA-1 hash. See "No SHA-1 Collision? Yet SHA1 is broken?" for more information.

history | show excerpt | excerpt history