logoalt Hacker News

GTPyesterday at 8:06 PM0 repliesview on HN

IIRC SHA3's reference implementation had an integer overflow in a counter that made finding collisions trivial, as it meant that some blocks of the input weren't considered.