Use SHA3.

Author: sephynox

src/sensitive_attributes/builder.rs

@@ -168,9 +168,9 @@ impl SensitiveAttributeBuilder {
 		let hash_input = create_hash_input(salt.as_slice(), public_key_bytes, &encrypted_value, value);
 
 		let version: Integer = 0u64.into(); // version 0
-		let hashed_and_salted_value: OctetString = HashAlgorithm::Sha2_256.hash(&hash_input).into();
+		let hashed_and_salted_value: OctetString = HashAlgorithm::Sha3_256.hash(&hash_input).into();
 		let encrypted_salt: OctetString = encrypted_salt.into();
-		let hashed_value = SensitiveAttributeHashedValue::new(encrypted_salt, oids::SHA2_256, hashed_and_salted_value);
+		let hashed_value = SensitiveAttributeHashedValue::new(encrypted_salt, oids::SHA3_256, hashed_and_salted_value);
 		let nonce = nonce.to_vec();
 		let cipher = SensitiveAttributeCipher::new(oids::AES_256_GCM, nonce.into(), encrypted_key.into());
 		let encrypted_value: OctetString = encrypted_value.into();

src/sensitive_attributes/mod.rs

@@ -448,7 +448,7 @@ impl SensitiveAttribute {
 		let hash_input = create_hash_input(&proof_salt, public_key_bytes, &self.encrypted_value, &plaintext_value);
 
 		// Hash the concatenated data and compare
-		let computed_hash = HashAlgorithm::Sha2_256.hash(&hash_input);
+		let computed_hash = HashAlgorithm::Sha3_256.hash(&hash_input);
 		Ok(computed_hash.as_slice() == self.hashed_value.value.as_ref())
 	}
 

src/utils.rs

@@ -170,6 +170,7 @@ pub mod serde_helpers {
 		match algorithm {
 			"aes-256-gcm" => Ok(oids::AES_256_GCM),
 			"sha2-256" => Ok(oids::SHA2_256),
+			"sha3-256" => Ok(oids::SHA3_256),
 			_ => Err(E::custom(format!("Unknown algorithm: {algorithm}"))),
 		}
 	}