Hacker News new | ask | show | jobs
by upofadown 61 days ago
Yes. Both standards proposals have SHA256 fingerprints.

Not that there is anything wrong with SHA1 fingerprints in practice. The sort of collisions that SHA1 is susceptible to are not an issue in this particular application. With SHA256 fingerprints people would still be using 64 bit key IDs, just like they are doing now.

2 comments

Thank goodness. Finally. Yeah I'm just not comfortable with 80-bit complexity against Grover, even if it's practically infeasible.
Rfc9580 is not a proposal anymore, it's a published RFC.

(I suppose strictly speaking it's still a "proposed standard" vs "internet standard", but so is basically everything else)