Re: [saag] Re: No need for SHA-2 Packet Authentication - Open Letter to the WG and Area Directors

[Uri Blumenthal <uri@bell-labs.com>]

On Wednesday 24 July 2002 14:13, Housley, Russ wrote:
> .............. In our view, SHA-1 should be
> used unless a longer output value is needed.  In the proposal, the
> hash value is truncated to 128 bits, so there is no benefit from the
> more complicated hash function.
>
> I would support the use of SHA-256 if the final output were longer
> than 160 bits.

And to emphasize - it's for the cases when MAC of longer than 160 bits 
is needed, NOT when more than 160 bits of key material....
-- 
Regards,
Uri-David
-=-=-<>-=-=-
<Disclaimer>