pull down to refresh

0 sats \ 0 replies \ @anon 14 Nov 2023 \ on: Reasons to prefer blake3 over sha256 bitcoin
NIST/NSA have repeatedly signaled lack of confidence in SHA256: first by hastily organising the SHA3 contest in the aftermath of Wang's break of SHA1
"No: SHA2 lacks the structure the SHA1 attack relies on it (SHA1 has a linear message schedule, which made it possible to work out a differential cryptanalysis attack on it)."
BLAKE3 is much more efficient (in time and energy) than SHA256, like 14 times as efficient in typical use cases on typical platforms.
That advantage isn't there any more now that dedicated SHA256 instructions have been added to x86, ARMv8, and other commonly used platforms.
write
preview