Re:Maybe we shouldn't skip SHA-3
by andrewflnr on Friday June 02, 2017 @04:53PM
(#14473217)
True. But part of the question is whether to spend the engineering effort to make sure it's even possible to move away.
Definitely: it doesn't make much sense to move away from a hash that doesn't seem in danger of being broken, just because it is old — a clever new attack can be found for a newer hash, too (or for both).
Besides, usually there's a lapse of time between finding a major weakness and a practical collision.
On the other hand, when picking a hash… well, having a faster and less error-prone hash is nice.
Overall, I feel lucky to have such great choice.