Also, Google announced the first deliberate SHA-1 hash collision along with a practical technique for generating SHA-1 collisions: https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html -- Rich P.