That&#x27;s for a freestart collision, which is not the same as real-world attack. This is a big warning sign, but real attacks aren&#x27;t that bad yet. <a href="https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2015&#x2F;10&#x2F;sha-1_freestart.html" rel="nofollow">https:&#x2F;&#x2F;www.schneier.com&#x2F;blog&#x2F;archives&#x2F;2015&#x2F;10&#x2F;sha-1_freesta...</a>