On Tue, May 19, 2020 at 08:00:34PM +0200, Marius Bakke wrote: > This is a great initiative, and the patches LGTM. +1 > I think that if we are to move away from SHA256, we should go with > something that is immune to length extension attacks[0] such as BLAKE2/3 > or SHA-3 (Keccak). I think we are so far from needing to move away from SHA256 that we can't know what the best replacement will be when the time comes. It will probably be quite a long time, maybe decades.