RE: DH group exchange (Re: SSH key algorithm updates)

[Peter Gutmann <pgut001%cs.auckland.ac.nz@localhost>]

mdb%juniper.net@localhost <mdb%juniper.net@localhost> writes:

>Well, what do other folks on the list think? Is it time to add SHA3 to the
>SSH standard for DH Group15 and DH Group16?

Nope.  We know, from the outcome of the SHA-3 competition, that SHA-2 is
actually a lot stronger than people thought.  So adding SHA-3 would be adding
yet another extra algorithm that's not noticeably stronger than SHA-2 (just
different), but a whole lot slower.  If there's some desperate demand for a
new hash algorithm, I'd rather have Blake2, which is at least an improvement
on SHA-2.

Peter.