I had this same experience working on a proprietary backup system that used hashes heavily in 2016 or so.
“FIPS says we can only use SHA-256.”
“But we use hashes for deduplication, not security.”
“Doesn’t matter, FIPS says it.”
“But we have thousands of users. Many are on older CPUs where that hash is expensive.”
“Doesn’t matter.”
“Can we just throw truncated SHA-256 in the same field as SHA-1 and call it a day?”
“No.”
Anyway we upgraded all our users to SHA-256.
I had this same experience working on a proprietary backup system that used hashes heavily in 2016 or so. “FIPS says we can only use SHA-256.” “But we use hashes for deduplication, not security.” “Doesn’t matter, FIPS says it.” “But we have thousands of users. Many are on older CPUs where that hash is expensive.” “Doesn’t matter.” “Can we just throw truncated SHA-256 in the same field as SHA-1 and call it a day?” “No.” Anyway we upgraded all our users to SHA-256.
score 1 · canonical