Re: Updated script hash proposal (non spec text) from Frederik Braun on 2013-12-11 (public-webappsec@w3.org from December 2013)

From: Frederik Braun <fbraun@mozilla.com>
Date: Wed, 11 Dec 2013 09:24:48 +0100
To: public-webappsec@w3.org
CC: jim.manico@owasp.org
Message-ID: <52A82150.3070004@mozilla.com>

On 11.12.2013 00:07, Garrett Robinson wrote:
> On 12/10/2013 02:58 PM, Jim Manico wrote:
>> Especially in Europe, NIST standards are frowned upon. Any chance 
>> whirlpool or other non-NIST hashes can be supported?

I don't know where this is coming from and my opinion is probably as
biased as anyone else's, but I haven't heard about whirlpool in ages and
don't think that non-NIST hashes are generally frowned upon here in Europe.
The SHA2 family is popular and so will SHA3 be in the future. Though it
might be interesting to look at other SHA3 candidates or their
successors like BLAKE2, which has really great performance.

Received on Wednesday, 11 December 2013 08:25:17 UTC