Thread

1. r3trohack3r · 1790876890 · focus · HN ↗

   > We can go through years of this SHA-1 to SHA-256 migration and then quantum computers break 256 and we're back in the same stupid boat again.

   SHA-256 is considered quantum safe by the NIST and is left out of PQC migration guidance entirely.

   1. schacon · 1790880512 · focus · HN ↗

      It was theoretical - the point was that maybe some paper is published or some new tech or issue comes up. Now we have to do this again. If we separate the concerns, then we don't have to deal with both as though they're one problem. We can deal with one thing for content addressing and another for trust and security.

      1. r3trohack3r · 1790951739 · focus · HN ↗

         Heard. If we’re going through this pain of a migration- adopting something that is forward compatible at the ecosystem/community level like ipfs makes sense to me. You throw a byte at the front of the hash which indicates the format the hash is in.

         We have a content addressable storage system internally and we use a self describing hash for it, so we can change the hashing scheme for different use cases.

         Multihash is ipfs’ container for this.

Unofficial Hacker News client; not affiliated with Y Combinator.