From: Jeff King <peff@peff.net>
Date: Mon, 15 Oct 2012 19:14:14 GMT
Subject: Re: When Will We See Collisions for SHA-1? (An interesting analysis by Bruce Schneier)
Message-ID: <20121015191414.GA6779@sigill.intra.peff.net>
In-Reply-To: <CA+EOSBki6-PWu=mwxr3PU0XC15cBhqr7L5Ay7-e9on+jGumsxw@mail.gmail.com>

On Mon, Oct 15, 2012 at 09:09:44PM +0200, Elia Pinto wrote:

> Hem , sha-3 i suppose, keccak, no ? But really is not so urgent as you
> have already told .

It depends. Read what Schneier wrote right before they announced the
SHA-3 winner:

  https://www.schneier.com/crypto-gram-1210.html#2

There's really no security reason not to use SHA-2, and in fact it's
probably better, as it has been more widely studied at this point. But
that part is easy; it's the compatibility switch-over that's hard (we
could also even parameterize the hash, but that has some annoyances,
too).

-Peff