IT lexicon › Security › HAVAL

HAVAL

Security På svenska → Updated: 2026-10-12

A 1992 hash function that could produce 128- to 256-bit fingerprints, with the user choosing how much computation to spend on security.

HAVAL was presented in 1992 by Yuliang Zheng, Josef Pieprzyk and Jennifer Seberry. The idea was to combine three, four or five passes of the compression function with a selectable output length. More passes meant a bigger security margin and slower hashing. The trade-off was unusual, and it appealed to anyone who wanted to tune security themselves.

Collision attacks on reduced variants, especially the three-pass version, were published during the 2000s. HAVAL then stopped being something to trust in new systems. Anyone inheriting a database of HAVAL hashes should migrate it to SHA-2 or SHA-3.

← Back to the lexicon