On Thu, 17 Apr 2025 17:17:15 GMT, Valerie Peng <valer...@openjdk.org> wrote:

> I will take a look~

Thanks.

I have 2 concerns on this feature:
1. These algorithms are mainly used in higher-level algorithms, mainly 
signature algorithms. It seems seldom used on their owns. But again, even other 
SHA-3 algorithms are not used a lot.
2. SHAKE128 is both an XOF and a `MessageDigest` algorithm. Although it's 
well-known that when it is used as a `MessageDigest` algorithm the output size 
is 256 bits, people might still be confused or simply not aware of it. In this 
sense, the name might be better SHAKE128-256. Same for SHAKE256, which could be 
SHAKE256-512.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/24576#issuecomment-2828084387

Reply via email to