Re: Hash algorithm analysis

Hi Brian,

On Tue, 24 Jul 2018, brian m. carlson wrote:

On Tue, Jul 24, 2018 at 02:13:07PM -0700, Junio C Hamano wrote:

quoted

Yup.  I actually was leaning toward saying "all of them are OK in
practice, so the person who is actually spear-heading the work gets to
choose", but if we picked SHA-256 now, that would not be a choice that
Brian has to later justify for choosing against everybody else's
wishes, which makes it the best choice ;-)

This looks like a rough consensus.

As I grew really uncomfortable with having a decision that seems to be
based on hunches by non-experts (we rejected the preference of the only
cryptographer who weighed in, after all, precisely like we did over a
decade ago), I asked whether I could loop in one of our in-house experts
with this public discussion.

Y'all should be quite familiar with his work: Dan Shumow.

Dan, thank you for agreeing to chime in publicly.

Ciao,
Dscho