More directly and earlier, and, amusingly, a reply to tptacek is: https://twitter.com/veorq/status/834872988445065218 https://twitter.com/veorq/status/83487298

More directly and earlier, and, amusingly, a reply to tptacek is: https://twitter.com/veorq/status/834872988445065218 https://twitter.com/veorq/status/834872988445065218 The line of thinking is more fully (if less sha2-specifically) covered in Aumasson's 'Too much crypto' paper, which has also had HN discussions.