Roger:I strongly encourage the use of SHA-256 (over SHA-1) for a signature that needs to stand for 20 years.
What key size are you choosing that will also be acceptable in 2027? Russ At 09:38 AM 1/29/2007, ROGER YOUNGLOVE wrote:
We are standing up a number of CAs (Selfsigned Root, Policy and Issueing).The question has come up with the Microsoft CA product we have the ability to chose SHA 1, SHA 256, SHA 512. i believe that SHA1 is not sufficent for a 20 year root CA lifespan. I need expert support for moving to SHA 256 at a minimum.Roger Younglove Principal Consultant Ford Motor Company