Re: [openssl-users] Truncating A Hash

2015-05-26 Thread Jeffrey Walton
On Mon, May 25, 2015 at 8:05 AM, lists wrote: > On 05/15/2015 12:09 AM, Jay Foster wrote: >> >> What is the down side of truncating a hash? For example, an SHA-256 hash >> is 256 bits. Is it any less secure if one was to drop the last 128 bits to >> make a 128 bit hash or take the MD5 hash of th

Re: [openssl-users] Truncating A Hash

2015-05-25 Thread Jakob Bohm
On 15-05-2015 00:09, Jay Foster wrote: What is the down side of truncating a hash? For example, an SHA-256 hash is 256 bits. Is it any less secure if one was to drop the last 128 bits to make a 128 bit hash or take the MD5 hash of the SHA-256 hash to get a 128 bit hash? It does not seem that

Re: [openssl-users] Truncating A Hash

2015-05-25 Thread lists
On 05/15/2015 12:09 AM, Jay Foster wrote: What is the down side of truncating a hash? For example, an SHA-256 hash is 256 bits. Is it any less secure if one was to drop the last 128 bits to make a 128 bit hash or take the MD5 hash of the SHA-256 hash to get a 128 bit hash? It does not seem t

Re: [openssl-users] Truncating A Hash

2015-05-14 Thread Michael Wojcik
> From: openssl-users [mailto:openssl-users-boun...@openssl.org] On Behalf > Of Jay Foster > Sent: Thursday, May 14, 2015 18:09 > To: openssl-users@openssl.org > Subject: [openssl-users] Truncating A Hash > > What is the down side of truncating a hash? For example, an SHA-2

Re: [openssl-users] Truncating A Hash

2015-05-14 Thread Viktor Dukhovni
On Thu, May 14, 2015 at 03:09:10PM -0700, Jay Foster wrote: > What is the down side of truncating a hash? For example, an SHA-256 hash is > 256 bits. Is it any less secure if one was to drop the last 128 bits to > make a 128 bit hash Yes, a truncated hash is less secure against both collision a

[openssl-users] Truncating A Hash

2015-05-14 Thread Jay Foster
What is the down side of truncating a hash? For example, an SHA-256 hash is 256 bits. Is it any less secure if one was to drop the last 128 bits to make a 128 bit hash or take the MD5 hash of the SHA-256 hash to get a 128 bit hash? It does not seem that such an action would make it any easie