In February 2017, Google and the CWI Amsterdam research institute jointly announced 'SHAttered,' the first publicly demonstrated practical collision in the SHA-1 cryptographic hash function — two distinct PDF files that hash to the same SHA-1 digest. The attack required an estimated 9,223,372,036,854,775,808 SHA-1 computations, equivalent to roughly 6,500 CPU-years and 100 GPU-years of computation, and accelerated the industry-wide migration away from SHA-1 that standards bodies had already been recommending since the mid-2000s.
The question, scope, and sources behind this Registry record.
In February 2017, Google and the CWI Amsterdam research institute jointly announced 'SHAttered,' the first publicly demonstrated practical collision in the SHA-1 cryptographic hash function — two distinct PDF files that hash to the same SHA-1 digest. The attack required an estimated 9,223,372,036,854,775,808 SHA-1 computations, equivalent to roughly 6,500 CPU-years and 100 GPU-years of computation, and accelerated the industry-wide migration away from SHA-1 that standards bodies had already been recommending since the mid-2000s.
The first publicly demonstrated pair of distinct inputs producing an identical SHA-1 hash digest, breaking SHA-1's collision resistance in practice rather than merely in theory.
Change a parameter to stress-test whether a proposed result is still inside the published specification. This is an audit aid, not a proof checker.
This record has no editable parameters. Read the formal question and assumptions before challenging it.
Current frontiers derived from accepted Claims.
An observed or demonstrated result; no opposing bound is implied.
The frontier is not sacred
Most progress starts with a disagreement that survives contact with evidence. If you can push the known lower bound up or pull the upper bound down, show us the work.
≥ when you have shown that at least this value is achievable.≤ when you have shown that anything above this value is impossible.No vibes. State the value, define the scope, and link the paper, proof, code, or reproduction that lets another person check it. Editors review every challenge before the public record changes.
Challenge this recordAssertions tied to evidence, attribution, and review.
The frontier as it changed over time.
Only accepted Claims matching the current specification contribute to the displayed bounds. Strict inequalities remain open; contradictory Claims require editorial review.
1 accepted Claim, with 1 linked evidence records.
Permanent ID limitsregistry.com/limits/LR-SHA1-SHATTERED-COLLISION
No active verified bounties are linked to this Limit.
View verified bounty tracker ↗No accepted machine-checked reproductions are recorded for this Limit.
Limits Registry. LR-SHA1-SHATTERED-COLLISION. First publicly demonstrated practical collision in the SHA-1 hash function. 2026.