In any case, if the 2^63 attack against SHA-1 that was just announced hits. Now, the first reference implementations will probably be targeted. 2^63 is quite crackable with today's computing power, there are already some initial experiences. And thus, it is probably only a matter of time before, similar to MD5, hash collisions for real documents can be produced. It's quite strange to see how the field has changed in terms of the computing power that can be brought to bear.