6
Google Online Security Blog: Announcing the first SHA1 collision (security.googleblog.com)