Bruce Schneier: SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. http://www.schneier.com/blog/archives/2005/02/sha1_broken.html Ciao. Gianni.