Live data from Hacker News

Maybe we shouldn't skip SHA-3

cryptologie.net

111–112 of 112 posts

Re: Maybe we shouldn't skip SHA-3

#111
post #99
post #23

Earlier quoted context omitted.

It depends what you're using it for, no? If you're using it as part of an auth mechanism then sure, don't use it. If you're using it for anything else (checksum, verification etc.) where you don't expect any adversarial action then it's fine.

I'd much rather have it as a well known meme that "md5 is broken, don't use it. Period." than a list of caveats like "ok for non security" or "ok with hmac". I've seen many claims from good engineers of the sort "this design is ok because it's not for security" when it absolutely was. A simpler rule wins, even if it costs a bit now. It'll save someone in a bigger way later.

Good points.
Post reply on HN