(Sorry if this has already been raised, but...)

The digest identifiers in draft-ietf-dane-registry-acronyms-02 seem a
little silly, in that nobody else in the world really seems to care that
these are variants of SHA2.  The standard practice across many libraries is
to just use some variant of "SHA-XXX", where XXX=256,384,512.

OpenSSL: shaXXX
WebCrypto: SHA-XXX
BouncyCastle: SHAXXXDigest
CNG: BCRYPT_SHAXXX_ALGORITHM
PKCS#11: CKM_SHAXXX

So I would suggest we just change these to "SHA-256" and "SHA-512".

--Richard
_______________________________________________
dane mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dane

Reply via email to