If you use SHA1: 1) hard, but by all accounts getting pretty cheap if you really care. 2) still believed to be very hard, but no one should be trusting it for crypto Just worth noting, say this was ...