3 ms·
> But if it turns out that SHA-512 isn't collision resistant, you have much bigger problems. Does it though? Most protocols are moving towards preimage resista
by dependenttypes 7y ago
> But if it turns out that SHA-512 isn't collision resistant, you have much bigger problems.
Does it though? Most protocols are moving towards preimage resistance nowadays.
That being said, ed25519ph is easier to protect against fault attacks, see https://github.com/jedisct1/libsodium/issues/170 https://github.com/jedisct1/libsodium/issues/170