Anything to back this up? Why is SHA-256 stupid? I’d use truncated SHA-512 for speed on large inputs, maybe, but the extra 256 bits don’t usually add much in terms of security…