Andrey Jivsov <openpgp(_at_)brainhub(_dot_)org> quoted Werner Koch:
Note that I ordered SHA3-224 first; when we did SHA2 we forgot about 224
and thus it ended up out of order.
And that's pretty much what the -224 hashes are, forgettable (and -384 only
slightly less so). There's an obvious need for -256, and then you need -512
for people who need hashes that go to 11, but what's the point of -224 and
-384 in OpenPGP? Are users really going to say "well, everyone else is using
-256 and I like to be different, but -512 is too big, and -384 just doesn't go
with the tie I'm wearing, so I'm really glad there's -224 as well"? It's just
more bloat in the spec (and implementations) that'll never be used by anyone.
It was forgotten in 4880, it should be forgotten in x880 as well (along with
the equally useless -384).
Peter.
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp