News for hackers. Stuff that matters.

A comment on Whatever happened to SHA-256 support in Git?. Parent comment

Re:Whatever happened to SHA-256 support in Git? by kzrdude on Thursday June 23, 2022 @03:15PM (#31853905)
The canonical solution is SHA-512/256 i.e 512 truncated to 256 bits where "nothing is lost" compared to SHA-256 and something is gained. It might even be faster (due to the 64-bit word formulation of SHA-512) in some implementations.
[ Parent | on HN ]
Re:Whatever happened to SHA-256 support in Git? by NovemberWhiskey on Thursday June 23, 2022 @03:35PM (#31854168)
Generally is faster (fewer rounds per byte). If you have 256 bits available for your hash and you're on a 64 bit architecture, I've yet to see a case where you're not better off for performance and security choosing SHA-512/256 over SHA-256, assuming you have the choice.
[ Parent | on HN ]
Re:Whatever happened to SHA-256 support in Git? by ztorkelson on Thursday June 23, 2022 @05:41PM (#31855498)
Is this still true? I understood SHA256 to be faster than SHA512 due to hardware acceleration on current CPUs; dedicated instructions exist for the former but not the latter.
[ Parent | on HN ]
Re:Whatever happened to SHA-256 support in Git? by NovemberWhiskey on Friday June 24, 2022 @01:19PM (#31866026)
It seems like it's not true on a MacBook with the Apple M1 processor; SHA-256 is now significantly faster. It still seems to be true on a couple of Intel machines I have access to.
[ Parent | on HN ]
Re:Whatever happened to SHA-256 support in Git? by bawolff on Friday June 24, 2022 @08:02PM (#31871042)
Googling i noticed there seems to be a bug in openssl where it does not use optimized sha-512 on m1 (but does for sha256) - https://github.com/openssl/openssl/issues/14897 so that might be the explanation.

Also i think the length of the input matters when comparing sha256 vs sha512.

[ Parent | on HN ]