Study. uk . com
  1. Home
  2. All questions
  3. Question 255

CISSP study material · question 255 of 500

A design document states that publication of the SHA-3 standard retired the SHA-2 family. Why is that wrong?

  1. FIPS 202 specifies SHA-2 as well, so the family did not move.
  2. FIPS 202 was issued alongside FIPS 180-4, which continues to specify SHA-1 and the SHA-2 family.
  3. SHA-3 was withdrawn before publication and never took effect.
  4. SHA-2 was retired by FIPS 140-3 rather than by FIPS 202.
Show the answer

Answer: B. FIPS 202 was issued alongside FIPS 180-4, which continues to specify SHA-1 and the SHA-2 family.

FIPS 202 was issued to sit alongside FIPS 180-4 rather than displace it, so SHA-1 and the SHA-2 family remain specified there; SHA-3 did not retire SHA-2.

Source: NIST FIPS 202 (NIST) — FIPS 202 > Abstract

Challenge yourself on this topic → Study as cards