[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: SHA 1 vs. SHA 256 for Root CA




Roger:

I strongly encourage the use of SHA-256 (over SHA-1) for a signature that needs to stand for 20 years.

What key size are you choosing that will also be acceptable in 2027?

Russ


At 09:38 AM 1/29/2007, ROGER YOUNGLOVE wrote:

We are standing up a number of CAs (Selfsigned Root, Policy and Issueing).
The question has come up with the Microsoft CA product we have the ability to chose SHA 1, SHA 256, SHA 512. i believe that SHA1 is not sufficent for a 20 year root CA lifespan. I need expert support for moving to SHA 256 at a minimum.

Roger Younglove
Principal Consultant
Ford Motor Company