Re:Cryptographic Right Answers
by stouset on Wednesday April 04, 2018 @01:58PM
(#16757219)
> However, it seemed like on 64-bit machines, sha2-512 is faster, and I can just lop off the first 256 bits.
Just as a heads-up, SHA-512/256 isn't exactly just SHA-512 with 256 bits chopped off. It also uses a unique IV. This might not be a big difference in practice, but I'd lean toward using SHA-512/256 explicitly, and not SHA-512 truncated to 256 bits.
Just as a heads-up, SHA-512/256 isn't exactly just SHA-512 with 256 bits chopped off. It also uses a unique IV. This might not be a big difference in practice, but I'd lean toward using SHA-512/256 explicitly, and not SHA-512 truncated to 256 bits.