Claims of breaking 92% of SHA-256 can't be good news for Julia!

Make that 100% - that would break everything, wouldn’t it?

I don’t know much about cryptography but if the statement they make is true I would say alot of software has a lot of problems. :thinking:

this “paper” is AI slop and should not be taken seriously.

Well, the technical terms seem to be in the ballpark even if the tone is unjustifiably alarmist. What’s most telling is that he doesn’t have a seat at the adult’s table at IACR ePrint.

Was it made by a Research paper mill?

Relevant YouTube video: https://youtu.be/SEwiOykoXXc

Disregarding the credibility of the source, which I’m not going to honor with a click.

No, it would have zero impact on Julia specifically, other than removing one potential upgrade path from the increasingly vulnerable SHA-1.

If we now instead assume that SHA-1 becomes broken to the degree that anyone with moderate resources can engineer a hash collision, it still wouldn’t break everything. For normal benign use nothing would change. But it does mean that a layer of defense against bad actors would be lost.

Is SHA1 still used for security related purposes? I thought tools that use SHA1 like Git is only using it for corruption check (which I have no idea why a part of the Git community is advocating for a switch to SHA256). That being said, I hate AI slop, and SHA1 or SHA256 being actually broken would not only be a problem for Julia lol.