{"id":329,"date":"2019-07-23T05:58:15","date_gmt":"2019-07-23T05:58:15","guid":{"rendered":"https:\/\/www.rapidsslonline.com\/ssl\/?p=329"},"modified":"2021-09-30T08:34:44","modified_gmt":"2021-09-30T08:34:44","slug":"sha-2-ssl-certificates","status":"publish","type":"post","link":"https:\/\/www.rapidsslonline.com\/ssl\/sha-2-ssl-certificates\/","title":{"rendered":"SHA2 SSL Certificates – All You Need to Know About SHA-2 SSL"},"content":{"rendered":"\n

Learn About The Key Differences Between SHA-1 And SHA-2 And Why SHA2 certificate Is Used Now  <\/h2>\n\n\n\n

SHA, or Secure Hash Algorithm, is a cryptographic hashing algorithm used in computer security.  It was created by the US National Security Agency (NSA) with the collaboration of other government and private institutes.  It has several versions – SHA-0, SHA-1, SHA-2, and SHA-3 versions.   <\/p>\n\n\n\n

Before jumping into SHA-2, lets cover some basics first.  <\/p>\n\n\n\n

What is Hashing?  <\/h3>\n\n\n\n

Hashing algorithm is a one-way function that shrinks data using a mathematical function. The resulting hash value is unique for that piece of content \u2013 no other piece of content will have the same hash value. <\/p>\n\n\n\n

So, for example, if you hash the line \u201cI bought an SSL certificate with a $50,000 warranty for $45 on Thursday, July 11, 2019.\u201d you’ll get a hash value like this: <\/p>\n\n\n\n

94BF78837296B93E4BEDB99FAAF44BAE2CEEC31469<\/p>\n\n\n\n

The resulting value is called hashed text, hashed value, or digest. Hashes are used for providing security to sensitive data, improving the speed of operations, securing passwords, and comparing data with ease. There are a number of hashing algorithms available in the industry, and SHA is one of the most popular. <\/p>\n\n\n\n

How is Hashing Different Than File Compression?  <\/h3>\n\n\n\n

There are two critical features of the SHA algorithm, which make it different than a regular zip file compression. <\/p>\n\n\n\n

  1. Hash values are unique<\/strong>: No two strings of text will create the same hash value. If it does, it called a collision in that particular hash algorithm.  If there is the slightest change in the original text, the entire hash value changes.  <\/li>
  2. Hash values are irreversible<\/strong>: This means that if you have pieces of only hashed text, you can\u2019t decrypt it and find out the original text. <\/li><\/ol>\n\n\n\n

    How is Hashing Used With SSL?  <\/h3>\n\n\n\n

    The SHA algorithm is used by SSL\/TLS certificate authorities (CA) to sign the digital certificates.  <\/p>\n\n\n\n

    When you buy an SSL certificate, the certificate authority puts the digital signature on the SSL certificate and hashes it using the SHA algorithm.  The unique hash value is proof that the SSL certificate is exactly the same as it was at the time of issuance, and the information it contains has not been modified or reproduced. If an attacker tries to manipulate or reproduce the SSL certificate, the hash value of its digital signature changes. The different hash value alerts browsers and operating systems to the problem, and they show an error warning to users. <\/p>\n\n\n\n

    The Transition From SHA-1 to SHA-2  <\/h3>\n\n\n\n

    SHA-1, which is\u00a0a\u00a0member of the SHA hashing algorithm family, was first introduced in 1993. It was\u00a0the\u00a0primary algorithm for signing digital certificates\u00a0and certificate revocation lists. In 2001, SHA-2, the upgraded version of SHA-1\u00a0was\u00a0introduced with longer and stronger encryption. SHA2 is a family of algorithms that uses 224, 256, 284, or 512 bit long key for the purpose of encryption. It was voluntary to use SHA-2 for more than a decade after its introduction, and most of the CAs chose to stay in their comfort zone by using SHA-1.\u00a0\u00a0<\/p>\n\n\n\n