Unverified60% confidenceFactExact time
SHA-256 belongs to the SHA-2 family, was standardized by the U.S. NIST in 2001, and currently has no known practical collision attacks.
2
Sources
60%
Confidence
Long-term
Relevance
7/9/2026
First Seen
Sources
Git Hash Chain Malleability: How Fragile Is the Immutability You Trust?
hackernewshackernews7/7/2026
Related Claims
VerifiedSHA-256 is a cryptographic hash function in the SHA-2 family with an output length of 256 bits, possessing collision resistance and preimage resistance.75% similarUnverifiedCommit SHA 基于 SHA-1 的内容寻址特性，具备密码学层面的完整性保证，即便标签被恶意篡改，锁定 SHA 的工作流也不会受影响，Git 正逐步向 SHA-256 迁移67% similarUnverifiedFrom the public demonstration of the SHA-1 collision attack to the full deprecation of SHA-1 by mainstream browsers and CAs took nearly ten years.62% similarUnverifiedSHA-256 hash verification only validates byte integrity, not the semantic safety of those bytes — a matching diff can still contain logic vulnerabilities or incorrect database migration directions.60% similarUnverifiedAn analysis article on the GitButler blog argues that making SHA-256 the default could be a costly mistake58% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/318070API
curl https://kongchang.com/api/v1/knowledge/claims/318070MCP
get_claim(id=318070)