less than 1 minute read

Awesome work to demonstrate how to deliberately cause a SHA-1 collision.

It is now practically possible to craft two colliding PDF files and obtain a SHA-1 digital signature on the first PDF file which can also be abused as a valid signature on the second PDF file.

(via SHAttered)