Google Online Security Blog: Announcing the first SHA1 collision