Entrust SSL Certificates, Powered by SHA-2 Security
Developed by the National Institute of Standards and Technology (NIST), SHA-2 represents the most current set of cryptographic hash functions. At a micro level, SHA-2 is based on a set of four hash functions — 224, 256, 384 or 512 bits — which strengthens the original SHA-1 hash function released in 1995 by the NIST.
To provide more compatibility, Entrust Certificate Services customers have the choice to sign any Entrust digital certificate with SHA-1 or SHA-2. And best of all, the option to use this advanced level of cryptography, based on the SHA256 implementation, is offered to Entrust customers at no extra cost.
In fact, the SHA-2 standard may be used with any of Entrust's digital certificates, including EV Multi-Domain SSL Certificates, Advantage SSL Certificates, Standard SSL Certificates, UC Multi-Domain SSL Certificates and Wildcard SSL Certificates. SHA-2 is even available with Entrust's signing and user digital certificates, including Adobe CDS, Secure Email and Code Signing.
Though most organizations won't experience any compatibility difficulties, some older systems — such as those running Microsoft Windows XP SP2 (or older) or outdated Web browsers — are unable to support SHA-2 encryption. In these situations, administrators will need to either use SHA-1 certificates or upgrade these systems to SHA-2-supported configurations.