NEW
A variable-parameter cryptographic hash function supporting multiple output lengths and 3–5 passes, proposed in the early 1990s.
DESCRIPTION
HAVAL (1992) is a one-way hash function offering flexibility in output length (e.g., 128–256 bits) and number of passes, trading performance for security margin. While innovative, it lacks modern standardization and is rarely used today. Some cryptanalytic results impact reduced-round variants. For new applications, standardized hashes like SHA-2/SHA-3 provide stronger assurance and interoperability. HAVAL persists mainly in legacy compatibility and cryptographic history.
ALTERNATIVE DEFINITIONS
Crypto++
HAVAL is a variable-length, variable-round hash function with 3–5 passes and outputs from 128 to 256 bits.
Emphasizes adjustable parameters; paraphrased due to offline generation.
Springer (Original Paper)
HAVAL is a one-way hashing algorithm with variable length of output, offering configurable security and performance.
Original publication context; paraphrased due to offline generation.
RELATED TERMS
RIPEMD-160 Cryptographic Hash Function Variable Output Length Collision Resistance Password-Based Key Derivation Function 2 Checksum BLAKE2 Hash Function Keccak
COMPETING TERMS
KNOWLEDGE AREAS
Data Security Software Engineering
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Software Developer IT Auditor
EXTERNAL SOURCES
TOP QUESTIONS
Is HAVAL recommended for new systems?
No. Prefer standardized, widely vetted hashes like SHA-256/512 or SHA-3.
Category: Recommendation
What made HAVAL distinctive?
Its configurable passes and output length allowed tuning performance and security.
Category: Distinction
Are there known attacks on HAVAL?
Some attacks target reduced-round variants; full-round variants are less studied than modern standards.
Category: Risks
When was HAVAL introduced?
HAVAL was proposed in 1992 during early hash function research.
Category: Background
What digest sizes does HAVAL support?
Common outputs include 128, 160, 192, 224, and 256 bits.
Category: Definition
Can HAVAL be used in HMAC?
Technically yes, but HMAC-SHA-256 or HMAC-SHA-512 are recommended for standardization and support.
Category: BestPractice
Why did HAVAL fall out of favor?
Lack of standardization and stronger alternatives reduced its practical relevance.
Category: History
Is HAVAL suitable for password hashing?
No. Use Argon2, scrypt, or PBKDF2 with appropriate parameters and salts.
Category: Mistakes
What hot topic relates to HAVAL today?
Historical comparisons showing the evolution from configurable designs to standardized modern hashes.
Category: Topic