3 ms·
Planning on sticking with SHA2 until SHA3 has been around for a few years. I treat these things like Windows Service Packs. If I were a crypto expert (tptacek?)
by carbocation 16y ago
Planning on sticking with SHA2 until SHA3 has been around for a few years. I treat these things like Windows Service Packs. If I were a crypto expert (tptacek?) I might see things differently, but since I'm not, I try to thread the needle between falling too far behind, and cutting myself on the bleeding edge.
- tptacek 16y agoSHA1 won't kill you any time soon; people are not, despite the hype, rushing to replace designs that depend on it. SHA256 is the conservative default for new designs. In 4-5 years, SHA256 will probably have the same role as DES-EDE: a fundamentally sound design with unfavorable implementation properties (DES-EDE has a 64 bit block size, SHA256 has MD padding and length extension susceptibility), largely supplanted by something European.