Re: [tor-dev] SHA-3 isn't looking so hot to me (was: Draft sketch document with ideas for future crypto ops)

On Tue, Nov 1, 2011 at 1:20 PM, Zooko O'Whielacronx <zooko@zooko.com> wrote:

... Therefore, in the context of whether we can expect SHA-3 and/or SHA-256 circuits to come built into our chips in the future, the fact that SHA-256 can be implemented in a smaller circuit means it would be cheaper for a chip maker to include it.

my strong preference for SHA-2-256 is precisely for this reason. i use multiple systems with hardware accelerated SHA-2-256. these systems will never have accelerated SHA-3. adoption of SHA-3 into hardware designs may change this in the future; i am skeptical :)