4 ms·
Isn't Blake2 the best hash function? If yes why won't everybody just switch to it?
by qwerty456127 8y ago
Isn't Blake2 the best hash function? If yes why won't everybody just switch to it?
- lawn 8y agoBecause the different hash functions have different trade-offs. For example not all hash functions are cryptographic hash functions and can be much faster.
- cm2187 8y agoAlso aren’t SHAx hardware accelerated on x86 cpus?
- blattimwind 8y agoOnly SHA-1 and SHA-2 and only on current-gen Intel CPUs or all AMD Ryzen CPUs.
- zaarn 8y agoBlake2 is a cryptographic hash though and for updates it's also fairly fast on most systems, comparable with SHA2, so it shouldn't be a problem.
- mjevans 8y agoProbably because it isn't officially sanctioned, which apparently was the reason the more common libcs never added support for bcrypt directly. - "The security departments of some customers look at recommendations they get and evaluate the deployed systems based on this. In a few places this led to the problem that the NIST warns people indiscriminately about the use of MD5..." (Note, this was from 2007 when md5 would be in roughly the same state that sha1 is now in.) http://www.akkadia.org/drepper/sha-crypt.html http://www.akkadia.org/drepper/sha-crypt.html https://access.redhat.com/articles/1519843#ok-ok-but-why-not-bcrypt-5 https://access.redhat.com/articles/1519843#ok-ok-but-why-not...
- simias 8y agoSHA-2 is more widely supported and the de-facto standard these days. I'm not surprised that an entity like Microsoft ends up being conservative with its choices of algorithms. I guess they could've gone for SHA-3 but I suppose even that is a bit too "bleeding edge" for MS.
- aomix 8y agoMicrosoft dual signs at the moment with SHA1 and 2. SHA1 is used by older versions of Windows and SHA2 by newer versions. This flips a switch so older versions of Windows use SHA2 too.