Re:Whatever happened to SHA-256 support in Git?
by tatersolid on Thursday June 23, 2022 @02:59PM
(#31853678)
Truncated SHA-* hashes are more secure against length-extension attacks, but are very much less secure against collision and pre-image attacks (which are more important in most scenarios).
[ Parent
| on HN ]
Re:Whatever happened to SHA-256 support in Git?
by Dylan16807 on Thursday June 23, 2022 @03:20PM
(#31853973)
But also, 256 is overkill for collisions and pre-image.
There's a point where truncating starts to make it weaker, but when you first start chopping off bytes the benefits outweigh the drawbacks.