Graph
Haval

⚙️Haval

NEW

A variable-parameter cryptographic hash function supporting multiple output lengths and 3–5 passes, proposed in the early 1990s.

DESCRIPTION

HAVAL (1992) is a one-way hash function offering flexibility in output length (e.g., 128–256 bits) and number of passes, trading performance for security margin. While innovative, it lacks modern standardization and is rarely used today. Some cryptanalytic results impact reduced-round variants. For new applications, standardized hashes like SHA-2/SHA-3 provide stronger assurance and interoperability. HAVAL persists mainly in legacy compatibility and cryptographic history.

ALTERNATIVE DEFINITIONS

Crypto++

HAVAL is a variable-length, variable-round hash function with 3–5 passes and outputs from 128 to 256 bits.

Emphasizes adjustable parameters; paraphrased due to offline generation.

Source

Springer (Original Paper)

HAVAL is a one-way hashing algorithm with variable length of output, offering configurable security and performance.

Original publication context; paraphrased due to offline generation.

Source

RIPEMD-160 Cryptographic Hash Function Variable Output Length Collision Resistance Password-Based Key Derivation Function 2 Checksum BLAKE2 Hash Function Keccak

COMPETING TERMS

MD5 SHA-1

KNOWLEDGE AREAS

Data Security Software Engineering

TARGET AUDIENCE

Security Architect Cybersecurity Engineer Software Developer IT Auditor

EXTERNAL SOURCES

TOP QUESTIONS

No. Prefer standardized, widely vetted hashes like SHA-256/512 or SHA-3.

Category: Recommendation

What made HAVAL distinctive?

Its configurable passes and output length allowed tuning performance and security.

Category: Distinction

Are there known attacks on HAVAL?

Some attacks target reduced-round variants; full-round variants are less studied than modern standards.

Category: Risks

When was HAVAL introduced?

HAVAL was proposed in 1992 during early hash function research.

Category: Background

What digest sizes does HAVAL support?

Common outputs include 128, 160, 192, 224, and 256 bits.

Category: Definition

Can HAVAL be used in HMAC?

Technically yes, but HMAC-SHA-256 or HMAC-SHA-512 are recommended for standardization and support.

Category: BestPractice

Why did HAVAL fall out of favor?

Lack of standardization and stronger alternatives reduced its practical relevance.

Category: History

Is HAVAL suitable for password hashing?

No. Use Argon2, scrypt, or PBKDF2 with appropriate parameters and salts.

Category: Mistakes

What hot topic relates to HAVAL today?

Historical comparisons showing the evolution from configurable designs to standardized modern hashes.

Category: Topic