Is anyone here still using SHA-1?
Breaking a SHA-1-generated SSH authentication key now costs roughly $50,000, putting high-profile remote servers at risk of attacks.
from ZDNET
Source: OpenSSH to deprecate SHA-1 logins due to security risk
Tag: SHA-1
-
OpenSSH deprecates SHA-1
-
SHA-1 is a Shambles
SHA-1 is a Shambles: Hashing Algorithm SHA-1 has seen collision attacks before. Gaëtan Leurent and Thomas Peyrin Published a chosen-prefix collision for SHA-1.
Source: SHA-1 is a Shambles