SHA-256 or SHA-512 when signing?

[mycognosist]

Hey friends, just wondering which hash function should be used when signing messages? sha256 or sha512?

[hackergrrl]

Great question. Are you working on an implementation? I've updated the spec to reflect these details:

https://github.com/cabal-club/cable/tree/v1-draft#42-ed25519

I've chosen SHA-512 primarily to be in alignment with what libsodium is using, since that's what we're using for the reference implementation.

[mycognosist]

Whoop! Thanks for the clarification. I really like the addition you made to the spec. I had looked around in the libsodium docs for a short while but quickly gave up the search.

Are you working on an implementation?

Just tinkering ^_^

[hackergrrl]

Same re: the documentation. I usually end up having to scan the source.