Re: DH group exchange (Re: SSH key algorithm updates)

[nisse%lysator.liu.se@localhost (Niels Möller)]

"Mark D. Baushke" <mdb%juniper.net@localhost> writes:

> Given your point about sha2-384, I think there are three possibilities
> that remain:
>
>   sha2-512
>   sha3-256
>   sha3-512

sha3-384 could also be on that list. Unlike for sha*2*-384, it's a
different security/performance tradeoff than sha3-512.

> fwiw: I have no idea if the SSH community is ready to consider the use
> of sha3 (FIPS PUB 202 style) at this time,

Me neither.

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.