Re: [saag] No need for SHA-2 Packet Authentication - Open Letter to the WG and Area Directors

[Mats Näslund <mats.naslund@era.ericsson.se>]

Hi

Russell Dietz wrote:

> 
> Unfortunately, the current draft is misleading in this regard:
> "Using the SHA-256 block cipher, with its increased block size (512 bits)
> and increased hash length (256 bits), provides the new algorithm with the
> ability to withstand continuing advances in crypto-analytic techniques and
> computational capability.  It also allows less frequent re-keying, which is
> useful for high-speed networks and high-volume applications."
> It is our belief that, as currently defined in DRAFT-SHA-256, the use of
> SHA-256 does not achieve any of these stated goals.

If you want to view SHA-256 as a block cipher, the "512" is to be
thought of
as the key-size and the 160/256 (SHA1/SHA256) corresponds to the block
size.

Best,

/Mats