SHA-2 collision attacks reach 39 steps
An article published on June 2, 2026 reports an improved search procedure for SHA-2 collisions and places the advance against earlier results of up to 37 steps.
Source: Ataques de colisão contra SHA-2 avançam para 39 etapas (eprint.iacr.org). Text prepared with AI from this source.
What happened and what to do
On June 2, 2026, the article described an improved search procedure for collisions against SHA-2, reaching 39 steps. According to the text, previous work had reached 37 steps but not 38, due to an uncontrolled, low-probability part of the differential characteristics. The result concerns attacks on a reduced number of steps; by itself, it does not demonstrate a practical break of SHA-2 across its full extent.
For a company, this calls for inventorying where SHA-2 is used, assessing the relevance of those uses, and preparing a cryptographic agility strategy with criteria for reviewing algorithms and updating systems. A collection and monitoring pipeline can track changes in research and relate them to the organization’s assets and dependencies.
How the consultancy can help
Wendelmaques can diagnose SHA-2 usage and related exposure, define a scope for monitoring and security improvements, and implement the agreed components, with operation as the client requires.
Next step
Send a short description of the systems or security concern under review to receive a scoped proposal.
Let's assess your project
I reply with scope and a proposal.