3 ms·
I don't understand the conclusion that urges the move to sha256 certificates. If the cost of an attack is going down by a factor of 1.5 every year and sha256 is
by corysama 12y ago
I don't understand the conclusion that urges the move to sha256 certificates. If the cost of an attack is going down by a factor of 1.5 every year and sha256 is only 1.4x more expensive, then doesn't transitioning to sha256 only serve delay the problem by less than a year?
- 13 12y agoYou misparsed that line, it's talking about the time to complete a single hash rather than the amount of relative time to find a collision. SHA256 has 128 bits of security to SHA1's heavily wounded <80 bits, there's a significant increase in complexity between the two.