Re: SHA 1 vs. SHA 256 for Root CA

[Mike <mike-list@xxxxxxxxx>]

What RFC defines the OID's, etc. for RSA with SHA-256 et. al.?
Is there a DSA standard that uses SHA-256?

Thanks,

Mike

Russ Housley wrote:
> Roger:
>
> I strongly encourage the use of SHA-256 (over SHA-1) for a signature 
> that needs to stand for 20 years.
>
> What key size are you choosing that will also be acceptable in 2027?
>
> Russ
>
>
> At 09:38 AM 1/29/2007, ROGER YOUNGLOVE wrote:
>
> > We are standing up a number of CAs (Selfsigned Root, Policy and 
> > Issueing).
> > The question has come up with the Microsoft CA product we have the 
> > ability to chose SHA 1, SHA 256, SHA 512. i believe that SHA1 is not 
> > sufficent for a 20 year root CA lifespan. I need expert support for 
> > moving to SHA 256 at a minimum.
> >
> > Roger Younglove
> > Principal Consultant
> > Ford Motor Company