Table 2.6
Lightweight hash functions (cryptographic properties)
Type of
compression
Message digest
Second
Name
Ref
Construction
function
(bits)
IS (bits)
Rate (bits)
Preimage
preimage
Collisions
Best known attack
ARMADILLO2
[49]
MD
BC with data-depend.
bit transpositions
80/128
/160/192/256
256/384
/480/576/768
48/64
/80/96/128
2 80
/2 128
/2 160
/2 192
/2 256
2 80
/2 128
/2 160
/2 192
/2 256
2 40
/2 64
/2 80
/2 96
/2 128
Practical
free-start
collision attack [435]
2 8.9
/2 10.2
/2 10.2
/
2 10.2
/2 10.2
DM-PRESENT
[102]
MD
PRESENT in
Davies-Meyer mode
64
64
80 / 128
2 64
2 64
2 32
Multi-differential
collision attack [343]
2 29.18
hash comp. on 12
rounds
H-PRESENT
[102]
MD
PRESENT in
128
128
64
2 128
2 128
2 64
−
double-block-length
c.
GLUON
[77]
T-sponge
Based on Feedback
128/160/224
136/176/256
8/16/32
2 128
/2 160
2 64
/2 80
2 64
/2 80
Preimage attack [469]
with Carry Shift
Register
/2 224
/2 112
/2 112
2 105
complexity
Lesamnta-LW
[281]
MD
Type-1 GFN
64−round
256
256
128
2 120
2 120
2 120
−
BC in LW1 mode
LHash
[582]
P-Sponge
18-round Feistel-PG
80/96
96/96
16/16
2 64
/2 80
2 40
/2 40
2 40
/2 40
−
(continued)