BIOS setting SHA1 or SHA2?

Su
1

On my MSI laptop you can set an option to SHA1 or SHA2. But what is it and what does it change?

The default is SHA1.

ai

The TPM allows software to send it commands that record measurements of software or configuration information. This information can be calculated using a hash algorithm that essentially converts a lot of data into a small, statistically unique hash value.

SHA-1: A 160-bit hash function that is similar to the earlier MD5 algorithm. It was developed by the National Security Agency (NSA) as part of the digital signature algorithm. Cryptographic weaknesses were discovered in SHA-1 and the standard was no longer approved for most cryptographic applications after 2010.

SHA-2: A family of two similar hash functions with different block sizes, known as SHA-256 and SHA-512. They differ in word size; SHA-256 uses 32-byte words while SHA-512 uses 64-byte words. There are also truncated versions of each standard known as SHA-224, SHA-384, SHA-512/224, and SHA-512/256.

So should SHA-1 or SHA-2 be chosen?

I would discontinue SHA-2 on my PC as SHA-1 is no longer recommended for use.

Do I notice a difference or is there a practical difference for me in using my computer?

No. It makes no difference to the end user.