title: Why choose SHA512 over SHA384?
body: <p>SHA384 is a truncated version of SHA512. But why would anyone use it? And corollary: if SHA384 is just as good as SHA512, is there any rationale in using the 512 bit version?</p>
  <p>I am planning to use one of the algorithms to verify file integrity, so I am mainly interested in collision security.</p>
  <p>I would be happy to hear how anyone uses the SHA2 digests in practice and why would you chose one version over the other.</p>