Re: [TLS] Issue 66: HMAC-256 based ciphersuites

[Florian Weimer <fweimer@xxxxxx>]

* Fumiaki MIURA:

> At Tue, 8 Jan 2008 12:53:25 +0200, <Pasi.Eronen@xxxxxxxxx> wrote:
>> TLS_RSA_WITH_AES_256_CBC_SHA256   
>
> Why not SHA512 for AES256?
>
> For example, FIPS 180-2 say that `security (bits)' for SHA-512 is 256
> in page 3.

Does this estimate also apply when using SHA-512 as a building block
for an HMAC?

-- 
Florian Weimer                <fweimer@xxxxxx>
BFK edv-consulting GmbH       http://www.bfk.de/
Kriegsstraße 100              tel: +49-721-96201-1
D-76133 Karlsruhe             fax: +49-721-96201-99


_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls