Re: Support for hash algorithms other than SHA-1

pgut001@cs.auckland.ac.nz (Peter Gutmann) Thu, 23 June 2005 04:00 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA06320 for <smime-archive@lists.ietf.org>; Thu, 23 Jun 2005 00:00:18 -0400 (EDT)
Received: from above.proper.com (localhost.vpnc.org [127.0.0.1]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j5N3cLxp089921; Wed, 22 Jun 2005 20:38:21 -0700 (PDT) (envelope-from owner-ietf-smime@mail.imc.org)
Received: (from majordom@localhost) by above.proper.com (8.12.11/8.12.9/Submit) id j5N3cLOC089919; Wed, 22 Jun 2005 20:38:21 -0700 (PDT)
X-Authentication-Warning: above.proper.com: majordom set sender to owner-ietf-smime@mail.imc.org using -f
Received: from smtpb.itss.auckland.ac.nz (chico.itss.auckland.ac.nz [130.216.190.12]) by above.proper.com (8.12.11/8.12.9) with ESMTP id j5N3cK21089866 for <ietf-smime@imc.org>; Wed, 22 Jun 2005 20:38:20 -0700 (PDT) (envelope-from pgut001@cs.auckland.ac.nz)
Received: from localhost (localhost.localdomain [127.0.0.1]) by smtpb.itss.auckland.ac.nz (Postfix) with ESMTP id 410663446A; Thu, 23 Jun 2005 15:38:19 +1200 (NZST)
Received: from smtpb.itss.auckland.ac.nz ([127.0.0.1]) by localhost (smtpb.itss.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 13132-07; Thu, 23 Jun 2005 15:38:19 +1200 (NZST)
Received: from iris.cs.auckland.ac.nz (iris.cs.auckland.ac.nz [130.216.33.152]) by smtpb.itss.auckland.ac.nz (Postfix) with ESMTP id 08CD734165; Thu, 23 Jun 2005 15:38:18 +1200 (NZST)
Received: from medusa01.cs.auckland.ac.nz (medusa01.cs.auckland.ac.nz [130.216.34.33]) by iris.cs.auckland.ac.nz (Postfix) with ESMTP id 8D75A37751; Thu, 23 Jun 2005 15:38:18 +1200 (NZST)
Received: from pgut001 by medusa01.cs.auckland.ac.nz with local (Exim 3.36 #1 (Debian)) id 1DlIXm-0006gK-00; Thu, 23 Jun 2005 15:38:22 +1200
From: pgut001@cs.auckland.ac.nz
To: ietf-smime@imc.org, tony@att.com
Subject: Re: Support for hash algorithms other than SHA-1
In-Reply-To: <42BA2008.6000206@att.com>
Message-Id: <E1DlIXm-0006gK-00@medusa01.cs.auckland.ac.nz>
Date: Thu, 23 Jun 2005 15:38:22 +1200
X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz
Sender: owner-ietf-smime@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smime/mail-archive/>
List-ID: <ietf-smime.imc.org>
List-Unsubscribe: <mailto:ietf-smime-request@imc.org?body=unsubscribe>

Tony Hansen <tony@att.com> writes:

>See draft-eastlake-sha2-00.txt for complete implementations of the entire SHA
>suite of hashes, for both 32-bit as well as 64-bit systems.

The problem isn't the lack of implementations (I'm already using Brian
Gladman's very nice implementation), it's that -384 and -512 are horribly
inefficient on the majority of systems.  Even -256 is painful on register-
starved x86 (so we're talking 95% of the planet here), but it's the most
reasonable tradeoff of the lot.  So I'd support -256 SHOULD, -384 and -512
MAY.

Peter.