security - 最好的通用摘要功能？

Question

在 2009 年编写一个普通的新应用程序时，就安全性和性能而言，最合理的摘要函数是什么？ (随着情况的变化，我如何在未来确定这一点？)

当 similar questions were asked以前，答案包括 SHA1、SHA2、SHA-256、SHA-512、MD5、bCrypt 和 Blowfish。

我意识到，如果使用得当，其中任何一种在很大程度上都可以发挥作用，但我宁愿不掷骰子随机选择一个。谢谢。

Answer 1

我会关注 NIST/FIPS guidelines :

March 15, 2006: The SHA-2 family of hash functions (i.e., SHA-224, SHA-256, SHA-384 and SHA-512) may be used by Federal agencies for all applications using secure hash algorithms. Federal agencies should stop using SHA-1 for digital signatures, digital time stamping and other applications that require collision resistance as soon as practical, and must use the SHA-2 family of hash functions for these applications after 2010. After 2010, Federal agencies may use SHA-1 only for the following applications: hash-based message authentication codes (HMACs); key derivation functions (KDFs); and random number generators (RNGs). Regardless of use, NIST encourages application and protocol designers to use the SHA-2 family of hash functions for all new applications and protocols.