Comparison of cryptographic hash functions: Difference between revisions

Revision as of 16:59, 9 July 2019

Latest revision as of 04:43, 24 May 2025

(21 intermediate revisions by 14 users not shown)

Line 1:

{{short description|Tables comparing general and technical information for common hashes}}
The following tables compare general and technical information for a number of [[cryptographic hash function]]sfunctions. See the individual functions' articles for further information. This article is not all-inclusive or necessarily up-to-date. An overview of hash function security/[[cryptanalysis]] can be found at [[hash function security summary]].

== General information ==

Line 16 ⟶ 17:

| Jean-Philippe Aumasson<br>Luca Henzen<br>Willi Meier<br>Raphael C.-W. Phan

| [[ChaCha20]]

| [https://131002.net/blake/ Website]<br>[https://web.archive.org/web/20201001184633/http://131002.net/blake/blake.pdf Specification]

|-

| [[BLAKE2]]

Line 23 ⟶ 24:

| [[BLAKE (hash function)|BLAKE]]

| [https://blake2.net/ Website]<br>[https://blake2.net/blake2.pdf Specification]<br>{{IETF RFC|7693}}

|-

| [[BLAKE3]]

| 2020

| Jack O'Connor<br>Jean-Philippe Aumasson<br>Samuel Neves<br>[[Zooko Wilcox-O'Hearn]]

| [[BLAKE2]]

| [https://github.com/BLAKE3-team/BLAKE3 Website]<br>[https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf Specification]

|-

| [[GOST (hash function)|GOST R 34.11-94]]

Line 65 ⟶ 72:

| [[RIPEMD]]

| 1992

| The RIPE Consortium<ref>{{cite conference|first1=Hans|last1=Dobbertin|author-link1=Hans Dobbertin|first2=Antoon|last2=Bosselaers|first3=Bart|last3=Preneel|author-link3=Bart Preneel|title=RIPEMD-160: A strengthened version of RIPEMD|conference=Fast Software Encryption. Third International Workshop|___location=Cambridge, UK|date=21–23 February 1996|pages=71–82|url=https://homes.esat.kuleuven.be/~bosselae/ripemd160/pdf/AB-9601/AB-9601.pdf|doi=10.1007/3-540-60865-6_44|doi-access=free}}</ref>

| [[MD4]]

|

Line 73 ⟶ 80:

| [[Hans Dobbertin]]<br>Antoon Bosselaers<br>[[Bart Preneel]]

| [[RIPEMD]]

| [httphttps://homes.esat.kuleuven.be/~bosselae/ripemd160.html Website]<br>[https://homes.esat.kuleuven.be/~bosselae/ripemd160/pdf/AB-9601/AB-9601.pdf Specification]

|-

| [[SHA-0]]

Line 79 ⟶ 86:

| rowspan="4"|[[National Security Agency|NSA]]

|

| [https://web.archive.org/web/20090130063617/http://w2.eff.org/Privacy/Digital_signature/?f=fips_sha_shs.info.txt SHA-0]

|-

| [[SHA-1]]

Line 128 ⟶ 135:

! data-sort-type=number | Length size

! data-sort-type=number | Word size

! data-sort-type=number | [[Round (cryptography)|Rounds]]

|-

| '''[[BLAKE2b]]'''

Line 145 ⟶ 152:

| 32

| 10

|-

| '''[[BLAKE3]]'''

| Unlimited{{notetag|It's technically 2⁶⁴ bytes which equals 2⁶⁷ bits<ref>https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf page 8</ref>}}

| 256{{notetag|The full BLAKE3 incremental state includes a chaining value stack up to 1728 bytes in size. However, the compression function itself does not access this stack. A smaller stack can also be used if the maximum input length is restricted.}}

| 512

| 64

| 32

| 7

|-

| '''[[GOST (hash function)|GOST]]'''

Line 195 ⟶ 210:

|-

| '''[[RadioGatún]]'''

| Unlimited{{notetag|RadioGatún is an Extendable[[extendable-Outputoutput Functionfunction]] which means it has an output of unlimited size. The official test vectors are 256-bit hashes. RadioGatún claims to have the security level of a cryptographic [[sponge function]] 19 words in size, which means the 32-bit version has the security of a 304-bit hash when looking at [[preimage attack]]s, but the security of a 608-bit hash when looking at [[collision attack]]s. The 64-bit version, likewise, has the security of a 608-bit or 1216-bit hash. For the purposes of determining how vulnerable RadioGatún is to [[length extension attack]]s, only two words of its 58-word state are output between hash compression operations.}}

| 58 words

| 19 words{{notetag|RadioGatún is not a Merkle–Damgård construction and, as such, does not have a block size. Its belt is 39 words in size; its mill, which is the closest thing RadioGatún has to a "block", is 19 words in size.}}

Line 499 ⟶ 514:

| [[Tiger (hash function)|Tiger-128]]

| {{nowrap|×2 {{=}} 128}}

|-

! rowspan="2" | Function

! [[Word (computer architecture)|Word]]

! [[Cryptographic hash function|Digest]]

! [[Merkle–Damgård construction|Chaining<br>values]]

! Computation<br>values

! [[Merkle–Damgård construction|Block]]

! [[Merkle–Damgård construction#Security characteristics|Length]]

! rowspan="2" | Words ×<br>Passes =<br>Rounds

! rowspan="2" | Operations

! rowspan="2" | [[Endianness|Endian]]

|-

! colspan="6" | Size ([[bit]]s)

|}

Line 513 ⟶ 541:

== External links ==

* [https://bench.cr.yp.to/results-hash.html ECRYPT Benchmarking of Cryptographic Hashes] – measurements of hash function speed on various platforms

* [https://ehash.iaik.tugraz.at/wiki/The_eHash_Main_Page The ECRYPT Hash Function Website] – A wiki for cryptographic hash functions

* [https://csrc.nist.gov/projects/hash-functions/sha-3-project SHA-3 Project] – Information about SHA-3 competition

Line 518 ⟶ 547:

{{Cryptography navbox|hash}}

[[Category:Cryptography]]

[[Category:Cryptographic primitives]]

[[Category:Cryptographic hash functions| ]]