News for hackers. Stuff that matters.
Re:Whatever happened to SHA-256 support in Git? by tatersolid on Thursday June 23, 2022 @02:59PM (#31853678)
Truncated SHA-* hashes are more secure against length-extension attacks, but are very much less secure against collision and pre-image attacks (which are more important in most scenarios).
Re:Whatever happened to SHA-256 support in Git? by Dylan16807 on Thursday June 23, 2022 @03:20PM (#31853973)
But also, 256 is overkill for collisions and pre-image.

There's a point where truncating starts to make it weaker, but when you first start chopping off bytes the benefits outweigh the drawbacks.