Re: SHA-256-128 Draft: Is this really required? Contradiction...

[Uri Blumenthal <uri@bell-labs.com>]

On Thursday 18 July 2002 01:27, Andrew Krywaniuk wrote:
> .............................
> that there is no need for SHA-2. (Unless it is to match the security
> strength of large DH groups in key derivation...............

But how so?  How is it any stronger...?

The size of the output of a hash function  doesn't ensure larger
quantity of randomness!

SHA-256 has he same 512-bit input buffer.  Correlation between
its output bits (and whether it exists or not) is unknown.

> which............is more a limitation of the key
> derivation algorithm than of the hash).

Yes!
-- 
Regards,
Uri-David
-=-=-<>-=-=-
<Disclaimer>