On 8/28/2018 8:58 PM, brian m. carlson wrote:
SHA-256 is somewhat slower to compute than SHA-1 in software. However, since our default SHA-1 implementation is collision-detecting, a reasonable cryptographic library implementation of SHA-256 will actually be faster than SHA-256.
Nit: do you mean "faster than SHA-1DC"?