tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Adding SHA-512 to the list of digests

On Thu, 8 Oct 2015, Taylor R Campbell wrote:
In the long run, I don't think we gain anything by continuing to use
SHA-1, but we ought to wait until ~everything has SHA-512 hashes
before we stop verifying the SHA-1 hashes -- otherwise it would expose
us to any problems in RMD160, which gets relatively little public

describes SHA-1 collisions starting to get easier.

Better to start phasing out SHA-1 sooner than later.

 - Hubert

Home | Main Index | Thread Index | Old Index