On Thu, Mar 16, 2017 at 12:25:42PM +0100, Werner Koch wrote:
On Tue, 14 Mar 2017 11:17, wk(_at_)gnupg(_dot_)org said:
What do others think:
- Use SHA-256 and truncated to 200 bits
- Use SHA-512 and truncated to 200 bits
- Anything else
If you want a truncated format you can extend later, why not use
SHAKE128 or SHAKE256? Then you don't have to implement a non-standard
truncation. If we implement something like Curve448, we're probably
going to need SHAKE256 anyway.
--
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | https://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: https://keybase.io/bk2204
signature.asc
Description: PGP signature
_______________________________________________
openpgp mailing list
openpgp(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/openpgp