On Tue, Nov 1, 2011 at 1:20 PM, Zooko O'Whielacronx zooko@zooko.com wrote:
... Therefore, in the context of whether we can expect SHA-3 and/or SHA-256 circuits to come built into our chips in the future, the fact that SHA-256 can be implemented in a smaller circuit means it would be cheaper for a chip maker to include it.
my strong preference for SHA-2-256 is precisely for this reason. i use multiple systems with hardware accelerated SHA-2-256. these systems will never have accelerated SHA-3.
adoption of SHA-3 into hardware designs may change this in the future; i am skeptical :)