14
$\begingroup$

When NIST introduced SHA-0 in 1993, they – for the first time – switched their naming convention from MD-n to SHA-n. Since both point to similar constructions (read: hashing algorithms with the same cryptographic goals), I am wondering why NIST chose to change the naming from „Message Digest“ to „Secure Hashing Algorithm“. A look around didn’t return useful information related to this.

Was there a specific reason to change the existing naming convention? Does it in some way indicate that there was change in cryptographic goals (and if, which ones) or was it simply the result of a standardization decision, potentially based on terminological changes within NIST definitions?

In case there’s an official statement explaining this change in naming convention, I’ld also appreciate a pointer to it for reference purposes.

Improve this question
$\endgroup$
4
  • 4
    $\begingroup$ Isn't MD{2,4,5,6} the series of hash functions designed by Rivest? $\endgroup$
    – Ruben De Smet
    Commented Mar 14, 2018 at 17:40
  • 2
    $\begingroup$ @RubenDeSmet Yep. Think of this as more of a canonical question where we can point people to whenever this comes up. ;) $\endgroup$
    – e-sushi
    Commented Mar 14, 2018 at 17:44
  • $\begingroup$ Ah roger that. Where do you guys come up with these things? :-) $\endgroup$
    – Ruben De Smet
    Commented Mar 14, 2018 at 17:46
  • 2
    $\begingroup$ @RubenDeSmet While writing absolutely superfluous answers like this one. $\endgroup$
    – e-sushi
    Commented Mar 14, 2018 at 17:50

1 Answer 1

Reset to default
26
$\begingroup$

When NIST introduced SHA-0 in 1993, they – for the first time – switched their naming convention from MD-n to SHA-n

Actually, MD-n was not NIST's naming conventions; it was RSA Security's (a private company) naming convention. Before SHA (which was the original name; SHA-0 is retroactive terminology given to distinguish the original proposal from what was finally adopted: SHA-1), NIST didn't define any hash functions.

Improve this answer
$\endgroup$
6
  • 4
    $\begingroup$ Easy demonstration with MD6, which was designed by Rivest et al. (like all MDn). It was submitted for SHA-3, but was "not yet ready to be a candidate for SHA-3 because of speed issues". $\endgroup$
    – Ruben De Smet
    Commented Mar 14, 2018 at 17:42
  • $\begingroup$ (Possibly off-topic) What actually happened with MD6 after Keccak was chosen? The Wikipedia page says it got fixed back up, but I can find no widespread implementations of it, or mentions of any further changes to it in the last few years. Has it been essentially abandoned in favor of the formally accepted SHA-3? $\endgroup$
    – Ti Strga
    Commented Mar 14, 2018 at 22:07
  • $\begingroup$ @TiStrga: I haven't heard of anyone using it. $\endgroup$
    – poncho
    Commented Mar 14, 2018 at 22:57
  • 3
    $\begingroup$ @TiStrga There's no reason for anyone to bother with MD6 given that SHA-2 is still fine, BLAKE2 is faster, and SHA-3 is now standard. We already have too many good standard options! $\endgroup$
    – Squeamish Ossifrage
    Commented Mar 15, 2018 at 2:28
  • $\begingroup$ @SqueamishOssifrage I prefer to think there's no such thing called "too many good standard options" because otherwise I'ld have to question the reasoning for SHA-3''s existence. ;) $\endgroup$
    – e-sushi
    Commented Mar 15, 2018 at 14:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.