[Catalog-sig] hash tags

Donald Stufft donald at stufft.io
Sat Mar 9 15:59:21 CET 2013


On Mar 9, 2013, at 9:56 AM, "M.-A. Lemburg" <mal at egenix.com> wrote:

> [Discussion about MD5]
> 
> I think there's not much point in discussing MD5 in this context.
> When creating new designs, you should always use the current
> best and most widely deployed algorithm, IMO.
> 
> For Python, this is the SHA-2 family at the moment, since SHA-3 is
> not supported by Python's hashlib. MD5 is only needed to support older
> software. SHA-1 is also support by Python versions older than Python 2.5.
> 
> It seems that SHA-256 and SHA-512, both from the SHA-2 family,
> are the most popular at the moment, so I guess SHA-256 is a good
> candidate to move forward and satisfy the 80/20 rule.

Sha256 and Sha512 are generally considered equivalent in a security context and either would be a perfectly fine candidate.

> 
> Agreed ?
> 
> FWIW, I'm pretty sure, SHA-256 will be broken in 10 years from
> now as well :-)
> 
> -- 
> Marc-Andre Lemburg
> eGenix.com
> 
> Professional Python Services directly from the Source  (#1, Mar 09 2013)
>>>> Python Projects, Consulting and Support ...   http://www.egenix.com/
>>>> mxODBC.Zope/Plone.Database.Adapter ...       http://zope.egenix.com/
>>>> mxODBC, mxDateTime, mxTextTools ...        http://python.egenix.com/
> ________________________________________________________________________
> 
> ::::: Try our mxODBC.Connect Python Database Interface for free ! ::::::
> 
>   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
>    D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
>           Registered at Amtsgericht Duesseldorf: HRB 46611
>               http://www.egenix.com/company/contact/


-----------------
Donald Stufft
PGP: 0x6E3CBCE93372DCFA // 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://mail.python.org/pipermail/catalog-sig/attachments/20130309/4ebc24c1/attachment.pgp>


More information about the Catalog-SIG mailing list