Table 2.6
(continued)
Type of
compression
Message digest
Second
Name
Ref
Construction
function
(bits)
IS (bits)
Rate (bits)
Preimage
preimage
Collisions
Best known attack
PHOTON
[251]
P-Sponge
12 round AES-like
permutation
80/128/160/
224/256
100/144/196/
256/288
(20,16)/16/
36/32/32
2 64
/2 112
/
2 124
/2 192
2 224
2 40
/2 64
/
2 80
/2 112
2 128
2 40
/2 64
/
2 80
/2 112
2 128
−
QUARK
[33]
P-Sponge
Grain-like
permutation
544/704/1024 rounds
136(u)/176(s)
/256(d)
136/176/256
8/16/32
2 128
/2 160
2 224
2 64
/2 80
2 112
2 64
/2 80
2 112
−
sLiSCP
[20]
P-Sponge
Type 2 GFN Simeck
160/160/192
192/256/256
32/64/64
2 128
/2 128
2 80
/2 96
2 80
/2 96
−
2 160
2 96
2 96
SPN-Hash
[144]
P-Sponge
SPN permutation
128/256
256/512
128/256
2 128
/2 256
2 128
/2 256
2 64
/2 128
−
in JH mode
10 rounds
SPONGENT
[100]
P-Sponge
PRESENT-like
80/128/160
88/136/176
8/8/16/16
2 80
/2 120
2 40
/2 64
2 40
/2 64
Linear distinguishers [2]
permutation
/224/256
/240/272
/16
/2 144
/2 208
/2 80
/2 112
/2 80
/2 112
on 23 rounds of the
45/70/90
/120/140 r.
/2 240
/2 128
/2 128
SPONGENT permutation