Re: [Monotone-devel] Monotone's usage of SHA1

[Lapo Luchini]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

BTW: I've been long lurking (and even that with loong hiatuses) but
I'm still using monotone for private projects and am still some kind
of a crypto-freak, so this thread is particularly interesting to me.

As far as modern hash go… I can see the reasons why NaCl library chose
SHA-512 as his default hash. I still have to read that thread (and
might well convince me otherwise), but SHA-512 or maybe SHA-512/256
(truncated to 256 bit) is what I would suggest to use at this moment.

- -- 
Lapo Luchini - http://lapo.it/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=Jpz7
-----END PGP SIGNATURE-----