Re: Hash algorithm analysis

From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Jul 30, 2018, 09:06 UTC
Message-ID: <nycvar.QRO.7.76.6.1807301058560.10478@tvgsbejvaqbjf.bet>
In-Reply-To: <20180724221008.GI18502@genre.crustytoothpaste.net>

Hi Brian,

On Tue, 24 Jul 2018, brian m. carlson wrote:

Show 8 quoted lines

> On Tue, Jul 24, 2018 at 02:13:07PM -0700, Junio C Hamano wrote:
> > Yup.  I actually was leaning toward saying "all of them are OK in
> > practice, so the person who is actually spear-heading the work gets to
> > choose", but if we picked SHA-256 now, that would not be a choice that
> > Brian has to later justify for choosing against everybody else's
> > wishes, which makes it the best choice ;-)
> 
> This looks like a rough consensus.

As I grew really uncomfortable with having a decision that seems to be based on hunches by non-experts (we rejected the preference of the only cryptographer who weighed in, after all, precisely like we did over a decade ago), I asked whether I could loop in one of our in-house experts with this public discussion.

Y'all should be quite familiar with his work: Dan Shumow.

Dan, thank you for agreeing to chime in publicly.

Ciao, Dscho