>> Seems to me you should be worried about both. > > let's not get carried away. the odds of accidental > collision are 1 2^80.
And being worried about both leads to the choice of SHA-1 as a suitable algorithm. If we weren't worried about it I'm sure some bright light would have picked ROT-13 for performance reasons.