Hashing algorithm choice about torba HOT 5 CLOSED

They are both as secure as it needs to be for the application.
Changing it would be a pointless hardfork and engineering effort.

from torba.

To add some clarification to this: I think @ocornoc was specifically referring to how the wallet is encrypted on disk and not necessarily what SHA was used for the blockchain itself.

My answer is the same as Kay's though: Bitcoin and LBRY use SHA256 to secure the blockchain. If there is a valid argument that SHA256 is not secure then it seems that fixing the blockchain would be significantly higher priority than how you encrypt your wallet.

Also, torba intends to be at least somewhat backwards compatible with electrum; there are many existing wallets with encrypted seeds/keys via the old electrum wallet which now need to be decrypted with torba. Changing how encryption works would require tracking which version of the algorithm was used to encrypt the wallet and then decrypting it with the correct decrypt algorithm. For a long time, both the 256 and 512 versions would be included in the code to be able to open old wallets; this would add unnecessary technical debt.

If SHA256 is not secure then we have much bigger problems on our hands.

from torba.

@eukreign Can you please triage?

from torba.

I would suggest @jackrobison and @kaykurokawa check this one out

from torba.

@eukreign is correct in the interpretation: I was specifically referring to torba's on-disk encryption.

And, eukreign, you are right (if I'm picking up on what you were saying correctly): SHA-256 is secure, and there may be reasons to keep SHA-256 in use whether or not it is optimally secure, such as backwards compatibility.

As an explanation of my original post, I had meant that SHA-256 is a secure hashing algorithm, though it may not be the most secure hashing algorithm readily available. I was attempting to provide reasons as to how truncated SHA-512 may be more secure than SHA-256, irregardless as to whether either of them were secure themselves.

from torba.