A chosen prefix collision in SHA-1 has demonstrated a new issue with the venerable hash function developed by the NSA.