View source for Template:Comparison of SHA functions

{| class="wikitable" style="margin-top: 0px; width:100%"
|+ Comparison of SHA functions {{Navbar|Comparison of SHA functions|plain=1|style=float:right}}
|- style="vertical-align:bottom;"
! colspan="2" rowspan="2" | Algorithm and variant
! rowspan="2" | Output size<br/>(bits)
! rowspan="2" | Internal state size<br/>(bits)
! rowspan="2" | Block size<br/>(bits)
! rowspan="2" | Rounds
! rowspan="2" | Operations
! rowspan="2" | Security (in{{nbsp}}bits) against [[Collision attack|collision attack]]s
! rowspan="2" | Capacity<br/>against [[Length extension attack|length extension attack]]s
! colspan="2" | Performance on [[Skylake (microarchitecture)|Skylake]] (median [[Cycles per byte|cpb]])<ref>{{cite web |url=http://bench.cr.yp.to/results-hash.html#amd64-skylake |title=Measurements table|website=bench.cr.yp.to}}</ref>
! rowspan="2" | First published
|- style="vertical-align:bottom;"
! long messages !! 8 bytes
|- style="text-align:center;vertical-align:top;"
| colspan="2" | '''[[MD5]]''' (as reference) || 128 || 128<br>{{nowrap|(4 × 32)}} || 512  || 64 || And, Xor, Rot, {{nowrap|Add (mod&nbsp;2<sup>32</sup>),}} Or || {{Bad|≤18<br/>(collisions found)<ref>{{Cite techreport|first1=Xie|last1=Tao|first2=Fanbao|last2=Liu|first3=Dengguo|last3=Feng|year=2013|title=Fast Collision Attack on MD5|work=Cryptology ePrint Archive|publisher=[[Organization:International Association for Cryptologic Research|IACR]]|url=https://eprint.iacr.org/2013/170.pdf}}</ref>}} || {{Bad|0}}|| 4.99 || 55.00 || 1992
|- style="text-align:center;vertical-align:top;"
| colspan="2" | '''{{nowrap|[[SHA-0]]}}''' || rowspan="2" | 160 || rowspan="2" | 160<br>{{nowrap|(5 × 32)}} || rowspan="2" | 512  || rowspan="2" | 80 || rowspan="2" | And, Xor, Rot, {{nowrap|Add (mod&nbsp;2<sup>32</sup>),}} Or || {{Bad|&lt;34<br/>(collisions found)}}  || rowspan="2"  {{Bad|0}} || ≈ SHA-1 || ≈ SHA-1 || 1993
|- style="text-align:center;vertical-align:top;"
| colspan="2" | '''{{nowrap|[[SHA-1]]}}''' || {{Bad|&lt;63<br/>(collisions found)<ref>{{Cite techreport|last1=Stevens|first1=Marc|author-link1=Marc Stevens (cryptology)|last2=Bursztein|first2=Elie|author-link2=Elie Bursztein|last3=Karpman|first3=Pierre|last4=Albertini|first4=Ange|last5=Markov|first5=Yarik|title=The first collision for full SHA-1|publisher=[[Company:Google|Google Research]]|url=https://shattered.io/static/shattered.pdf|lay-url=https://security.googleblog.com/2017/02/announcing-first-sha1-collision.html|lay-source=Google Security Blog|lay-date=February 23, 2017}}</ref>}} || 3.47 || 52.00 || 1995
|- style="text-align:center;vertical-align:top;"
| rowspan="3" | '''{{nowrap|[[SHA-2]]}}''' || ''SHA-224''<br/>''SHA-256'' || 224<br/>256 || 256<br/>{{nowrap|(8 × 32)}} || 512 || 64 || And, Xor, Rot, {{nowrap|Add (mod&nbsp;2<sup>32</sup>),}} Or, Shr || {{Good|112 <br/> 128}} || {{Bad|32<br/>0}}|| 7.62<br/>7.63 || 84.50<br/>85.25 || 2004<br/>2001
|- style="text-align:center;vertical-align:top;"
| ''SHA-384''<br/>''SHA-512'' ||  384<br/>512 || rowspan="2" | 512<br/>{{nowrap|(8 × 64)}} || rowspan="2" | 1024 || rowspan="2" | 80  || rowspan="2" | And, Xor, Rot, {{nowrap|Add (mod&nbsp;2<sup>64</sup>),}} Or, Shr || {{Good|192<br/>256}} || {{Bad|{{nowrap|128 (&le; 384)}}<br/>0}} || 5.12<br/>5.06 ||  135.75<br/>135.50 ||  2001
|- style="text-align:center;vertical-align:top;"
| ''{{nowrap|SHA-512/224}}''<br/>''{{nowrap|SHA-512/256}}'' || 224<br/>256 || {{Good|112<br/>128}} || {{Good|288<br/>256}} || {{nowrap|≈ SHA-384}} || {{nowrap|≈ SHA-384}} || 2012
|- style="text-align:center;vertical-align:top;"
| rowspan="2" | '''{{nowrap|[[SHA-3]]}}''' || ''SHA3-224''<br/>''SHA3-256''<br/>''SHA3-384''<br/>''SHA3-512'' || 224<br/>256<br/>384<br/>512 || rowspan="2" | 1600<br>{{nowrap|(5 × 5 × 64)}} || 1152<br/>1088<br/>832<br/>576 || rowspan="2" | {{nowrap|24}}<ref>{{cite web|url=http://keccak.noekeon.org/specs_summary.html |title=The Keccak sponge function family |date= |accessdate=2016-01-27}}</ref> || rowspan="2" | And, Xor, Rot, Not  || {{Good|112<br/>128<br/>192<br/>256}} ||{{Good|448<br/>512<br/>768<br/>1024}}|| 8.12<br/>8.59<br/>11.06<br/>15.88 ||154.25<br/>155.50<br/>164.00<br/>164.00 || rowspan="2" | 2015
|- style="text-align:center;vertical-align:top;"
| ''SHAKE128''<br/>''SHAKE256'' || {{nowrap|''d'' (arbitrary)}}<br/>{{nowrap|''d'' (arbitrary)}} || 1344<br/>1088 || {{Good|min(''d''/2, 128)<br/>{{nowrap|min(''d''/2, 256)}}}} || {{Good|{{nowrap|256<br/>512}}}} || 7.08<br/>8.59 || 155.25<br/>155.50
|}<noinclude>
{{Template reference list}}
</noinclude>