Difference between revisions of "Template:Comparison of SHA functions"
Jump to navigation
Jump to search
imported>Trappist the monk m (Reverted edits by 47.8.236.216 (talk) to last version by Cherkash) |
|||
| Line 15: | Line 15: | ||
! long messages !! 8 bytes | ! long messages !! 8 bytes | ||
|- style="text-align:center;vertical-align:top;" | |- style="text-align:center;vertical-align:top;" | ||
| − | | colspan="2" | '''[[MD5]]''' (as reference) || 128 || 128<br>{{nowrap|(4 × 32)}} || 512 || 64 || And, Xor, Rot, {{nowrap|Add (mod 2<sup>32</sup>),}} Or || {{Bad|≤18<br/>(collisions found)<ref>{{Cite techreport|first1=Xie|last1=Tao|first2=Fanbao|last2=Liu|first3=Dengguo|last3=Feng|year=2013|title=Fast Collision Attack on | + | | colspan="2" | '''[[MD5]]''' (as reference) || 128 || 128<br>{{nowrap|(4 × 32)}} || 512 || 64 || And, Xor, Rot, {{nowrap|Add (mod 2<sup>32</sup>),}} Or || {{Bad|≤18<br/>(collisions found)<ref>{{Cite techreport|first1=Xie|last1=Tao|first2=Fanbao|last2=Liu|first3=Dengguo|last3=Feng|year=2013|title=Fast Collision Attack on MD5|work=Cryptology ePrint Archive|publisher=[[International Association for Cryptologic Research|IACR]]|url=https://eprint.iacr.org/2013/170.pdf}}</ref>}} || {{Bad|0}}|| 4.99 || 55.00 || 1992 |
| − | |||
|- style="text-align:center;vertical-align:top;" | |- style="text-align:center;vertical-align:top;" | ||
| colspan="2" | '''{{nowrap|[[SHA-0]]}}''' || rowspan="2" | 160 || rowspan="2" | 160<br>{{nowrap|(5 × 32)}} || rowspan="2" | 512 || rowspan="2" | 80 || rowspan="2" | And, Xor, Rot, {{nowrap|Add (mod 2<sup>32</sup>),}} Or || {{Bad|<34<br/>(collisions found)}} || rowspan="2" {{Bad|0}} || ≈ SHA-1 || ≈ SHA-1 || 1993 | | colspan="2" | '''{{nowrap|[[SHA-0]]}}''' || rowspan="2" | 160 || rowspan="2" | 160<br>{{nowrap|(5 × 32)}} || rowspan="2" | 512 || rowspan="2" | 80 || rowspan="2" | And, Xor, Rot, {{nowrap|Add (mod 2<sup>32</sup>),}} Or || {{Bad|<34<br/>(collisions found)}} || rowspan="2" {{Bad|0}} || ≈ SHA-1 || ≈ SHA-1 || 1993 | ||
Revision as of 19:59, 1 August 2020
| Algorithm and variant | Output size (bits) |
Internal state size (bits) |
Block size (bits) |
Rounds | Operations | Security (in bits) against collision attacks | Capacity against length extension attacks |
Performance on Skylake (median cpb)[1] | First published | ||
|---|---|---|---|---|---|---|---|---|---|---|---|
| long messages | 8 bytes | ||||||||||
| MD5 (as reference) | 128 | 128 (4 × 32) |
512 | 64 | And, Xor, Rot, Add (mod 232), Or | ≤18 (collisions found)[2] |
0 | 4.99 | 55.00 | 1992 | |
| SHA-0 | 160 | 160 (5 × 32) |
512 | 80 | And, Xor, Rot, Add (mod 232), Or | <34 (collisions found) |
0 | ≈ SHA-1 | ≈ SHA-1 | 1993 | |
| SHA-1 | <63 (collisions found)[3] |
3.47 | 52.00 | 1995 | |||||||
| SHA-2 | SHA-224 SHA-256 |
224 256 |
256 (8 × 32) |
512 | 64 | And, Xor, Rot, Add (mod 232), Or, Shr | 112 128 |
32 0 |
7.62 7.63 |
84.50 85.25 |
2004 2001 |
| SHA-384 SHA-512 |
384 512 |
512 (8 × 64) |
1024 | 80 | And, Xor, Rot, Add (mod 264), Or, Shr | 192 256 |
128 (≤ 384) 0 |
5.12 5.06 |
135.75 135.50 |
2001 | |
| SHA-512/224 SHA-512/256 |
224 256 |
112 128 |
288 256 |
≈ SHA-384 | ≈ SHA-384 | 2012 | |||||
| SHA-3 | SHA3-224 SHA3-256 SHA3-384 SHA3-512 |
224 256 384 512 |
1600 (5 × 5 × 64) |
1152 1088 832 576 |
24[4] | And, Xor, Rot, Not | 112 128 192 256 |
448 512 768 1024 |
8.12 8.59 11.06 15.88 |
154.25 155.50 164.00 164.00 |
2015 |
| SHAKE128 SHAKE256 |
d (arbitrary) d (arbitrary) |
1344 1088 |
min(d/2, 128) min(d/2, 256) |
256 512 |
7.08 8.59 |
155.25 155.50 | |||||
References
- ↑ "Measurements table". bench.cr.yp.to.
- ↑ Tao, Xie; Liu, Fanbao; Feng, Dengguo (2013). Fast Collision Attack on MD5 (PDF). Cryptology ePrint Archive (Technical report). IACR.
- ↑ Stevens, Marc; Bursztein, Elie; Karpman, Pierre; Albertini, Ange; Markov, Yarik. The first collision for full SHA-1 (PDF) (Technical report). Google Research. Lay summary – Google Security Blog (February 23, 2017).
- ↑ "The Keccak sponge function family". Retrieved 2016-01-27.
