On Thu, 16 Mar 2017 18:25, tony(_at_)att(_dot_)com said:
On another note, for Werner Koch: are you talking about truncating the
value from sha2-512(x) down to 200 bits, or using the FIPS 180-4
truncated sha2-512/t(x,t) algorithm? There is a definite difference
I am talking about simple truncation (leftmost 200 bits (25 octets)) of
SHA-256/512 similar to what Git does. I explained the reason in my
reply to Jon's suggestion for SHA-512/t: This will make it easy to get
rid of the truncation iff need arises - without defining a new key
format. That is the full fingerprint will be the same and searches for
the truncated or full fingerprint will still return the same key.
Salam-Shalom,
Werner
--
Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.
pgpMTD3lF8gXd.pgp
Description: PGP signature
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp