sha256 - iv's are not constants about sjcl HOT 3 CLOSED

So don't use sha1.js. Problem solved.

from sjcl.

In my opinion there should be some consistency in the design, this is not a usage-issue.

from sjcl.

Perhaps. However, one of the main goals of SJCL is to be small (after comment stripping, compression, etc). SHA-1's keys and IV are 9 words. SHA-256's keys and IV are 72 words. So it wouldn't have been helpful to compute SHA-1's keys at init time instead of sending them down the wire, but it is helpful for SHA-256. This is also why AES computes its S-box / T-tables instead of having them written out.

Also, SHA-1 is by a different author (sqs), so there's a reason that it has a slightly different style.

Also, SHA-1 is broken, so you shouldn't use it unless you really have to follow a spec.

Also, there are actual bugs and open issues in SJCL which I've been putting off fixing, so they'd take higher priority anyway.

from sjcl.