News for hackers. Stuff that matters.
Re:Maybe we shouldn't skip SHA-3 by masklinn on Friday June 02, 2017 @11:05AM (#14470403)
> both performance

Surely SHA384 is no slower than SHA512/256 since both need to compute a SHA512 hash before truncation?

> and the number of truncated bits, which is the factor mitigating length extension.

Is there really a meaningful difference in mitigation between truncating 25% and 50% of the original hash?

There are no comments on this comment yet.