Re: [RFC][PATCH] Make cryptoapi non-optional?

Val Henson
2003-08-14T16:53:52Z

On Tue, Aug 12, 2003 at 11:06:14PM -0500, Matt Mackall wrote:
> On Tue, Aug 12, 2003 at 11:20:38PM -0400, Theodore Ts'o wrote:
>
> > The real issue is discarding information. By folding, we hide
> > information about the output of the SHA hash that will hopefully deny
> > information that a Very Sophisticated Attacker (say, at the level of a
> > certain agency that designed the SHA algorithm) that might make it
> > easier for them to attack the SHA algorithm.
>
> I'll buy that. However simply dropping the data would serve this
> purpose better. As would hashing less than the entire pool on each
> read.

I agree. Throwing away 80 bits of the 160 bit output is much better
than folding the two halves together. In all the cases we've
discussed where folding might improve matters, throwing away half the
output would be even better.

-VAL