[tor-dev] SHA-3 isn't looking so hot to me (was: Draft sketch document with ideas for future crypto ops)

[coderman]

On Tue, Nov 1, 2011 at 1:20 PM, Zooko O'Whielacronx <zooko at zooko.com> wrote:
> ...
> Therefore, in the context of whether we can expect SHA-3 and/or
> SHA-256 circuits to come built into our chips in the future, the fact
> that SHA-256 can be implemented in a smaller circuit means it would be
> cheaper for a chip maker to include it.

my strong preference for SHA-2-256 is precisely for this reason. i use
multiple systems with hardware accelerated SHA-2-256. these systems
will never have accelerated SHA-3.

adoption of SHA-3 into hardware designs may change this in the future;
i am skeptical :)