Security News > 2020 > July > YOU... SHA-1 NOT PASS! Microsoft magics away demonic hash algorithm from Windows updates, apps

Microsoft is preparing to once and for all drop support for the SHA-1 hash algorithm.

"To support evolving industry security standards, and continue to keep you protected and productive, Microsoft will retire content that is Windows-signed for Secure Hash Algorithm 1 from the Microsoft Download Center on August 3, 2020," Microsoft said in a tech bulletin.

"SHA-1 is a legacy cryptographic hash that many in the security community believe is no longer secure," Microsoft noted.

As with most of the bigger moves Microsoft makes, the transition from SHA-1 is a drawn-out process that has been going on since at least March 2019 when Windows Updates began to be signed with SHA-2 hashes.

Following the March 2019 move for Windows Update, Microsoft in August 2019 ended all support for updates not signed with SHA-2.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/07/29/microsoft_windows_sha_1/