SHA-1 generator
What SHA-1 is today
SHA-1 produces a 160-bit digest and once anchored TLS certificates and Git object IDs. Practical collision attacks mean you must not rely on SHA-1 for signatures or certificate issuance anymore—browsers block it. Git is migrating away; when you need tamper evidence, choose SHA-256.
Legitimate uses left
Reproducing legacy HMAC-SHA1 samples, validating ancient firmware filenames, or explaining why your CI still prints SHA-1 until repos rehash. Pair upgrades with SHA-256 generator migration guides.
Example
Diff two exported jars: matching SHA-1 still implies identical files unless someone crafts a collision pair—high risk for signed contexts, low for casual dedupe of trusted builds.
HMAC-SHA1?
Still seen in APIs but plan upgrades—RFC guidance discourages new deployments.