the SHAttered attack weakened SHA-1 by 17bits, one bit is lost to the birthday attack, and the other 142 bits were brute-forced