Comment Comment by GTP Why not transitioning to SHA3 directly? IIRC lenght extension attacks are not currently feasible on SHA2, but still theoretically possible. parent GTP 1 month ago
