Unverified50% confidenceFactExact time
From the public demonstration of the SHA-1 collision attack to the full deprecation of SHA-1 by mainstream browsers and CAs took nearly ten years.
1
Sources
50%
Confidence
Long-term
Relevance
10/12/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCommit SHA 基于 SHA-1 的内容寻址特性，具备密码学层面的完整性保证，即便标签被恶意篡改，锁定 SHA 的工作流也不会受影响，Git 正逐步向 SHA-256 迁移65% similarUnverifiedSHA-256 belongs to the SHA-2 family, was standardized by the U.S. NIST in 2001, and currently has no known practical collision attacks.62% similarUnverifiedSHA-1（Secure Hash Algorithm 1）由美国国家安全局设计，输入任意长度数据输出固定160位（40个十六进制字符）的哈希值61% similarUnverifiedShai-Hulud 攻击的核心特征是蠕虫式扩散：窃取维护者凭证后向其维护的多个包注入恶意代码，并利用窃取的更多凭证横向传播58% similarUnverifiedMD5和SHA-1由于计算速度过快，极易被暴力破解或彩虹表攻击，不适合用于密码哈希57% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1009741API
curl https://kongchang.com/api/v1/knowledge/claims/1009741MCP
get_claim(id=1009741)