> Maybe we can short-circuit this discussion. Given the trade-offs here, > I propose to use HMAC-SHA-1. Would you or anyone else object to that? I think HMAC-SHA-1 makes all kinds of sense. Ned