Marek notices "SHA-1 collisions now 2^52": http://eurocrypt2009rump.cr.yp.to/837a0a8086fa6ca714249409ddfae43d.pdf