Tony Hansen <tony(_at_)att(_dot_)com> writes:
See draft-eastlake-sha2-00.txt for complete implementations of the entire SHA
suite of hashes, for both 32-bit as well as 64-bit systems.
The problem isn't the lack of implementations (I'm already using Brian
Gladman's very nice implementation), it's that -384 and -512 are horribly
inefficient on the majority of systems. Even -256 is painful on register-
starved x86 (so we're talking 95% of the planet here), but it's the most
reasonable tradeoff of the lot. So I'd support -256 SHOULD, -384 and -512