On 01/04/15 14:38, Paul Wouters wrote: > > As for Stephen's comment regarding sha224. I honestly don't care that > much, but lean towards not manually cutting down hash lengths and let > cryptographers make those calls. Hence the use of sha224.
We're not depending on either collision resistance or pre-image resistance here so truncating sha256 is way better compared to using a hash algorithm that is almost never used. S. _______________________________________________ dane mailing list [email protected] https://www.ietf.org/mailman/listinfo/dane
