Re: SHA-1 broken

[Lutz Donnerhacke <lutz@xxxxxxxxxxx>]

* Konrad Rosenbaum wrote:
> While this attack reduces SHA-1 from strength 2^80 to 2^69 and 2^69
> operations is still unreachably much, likelihood seems high that someone
> will improve this attack once the paper has been released.
>
> Should we phase out SHA-1? But in favour of what?

Don't panic. This problem is already solved by allowing different
hash-algorithms in the packet format. As long as no detailed examination of
other algorithms is available, OpenPGP should not change MAYs and MUSTs.