Shabal-224 is a cryptographic hash function submitted to the NIST SHA-3 competition by the Saphir project. It advanced to the second round but was not selected as a finalist. Three registers and a block counter are mixed by a forty-eight step permutation over each 512-bit block.
| Property | Value |
|---|---|
| Category | Hash Functions |
| Sub-category | SHA-3 Candidate |
| Security status | 🎓 Educational Only |
| Complexity | Advanced |
| Inventor | Emmanuel Bresson, Anne Canteaut, Benoit Chevallier-Mames, Christophe Clavier, Thomas Fuhr, Aline Gouget, Thomas Icart, Jean-Francois Misarsky, Maria Naya-Plasencia, Pascal Paillier, Thomas Pornin, Jean-Rene Reinhard, Celine Thuillet, Marion Videau |
| Year | 2008 |
| Origin | 🇫🇷 France |
| Source | algorithms/hash/shabal.js |
| Parameter | Supported values |
|---|---|
| Output sizes | 28 bytes (224 bits) |
| Hash sizes | 28 bytes (224 bits) |
Status: 🎓 Educational Only
| Issue | Description | Mitigation |
|---|---|---|
| Distinguisher on the keyed permutation | Non-random behaviour was shown for the internal permutation during the SHA-3 second round; no attack on the hash function itself followed, but the result contributed to Shabal not advancing. | — |
7 vectors ship with this algorithm and run in the test suite. Byte values are hexadecimal.
Vector 1 — NIST SHA-3 KAT Len=0 - empty message
| Field | Value |
|---|---|
input |
(empty) |
expected |
562b4fdbe1706247552927f814b66a3d74b465a090af23e277bf8029 |
Vector 2 — NIST SHA-3 KAT Len=8 - one byte
| Field | Value |
|---|---|
input |
cc |
expected |
63d1743b183146ac2a75416c9a0d88c66f85a422a43e3171ef9cc923 |
Vector 3 — NIST SHA-3 KAT Len=504 - 63 bytes, one under the block size
| Field | Value |
|---|---|
input |
f57c64006d9ea761892e145c99df1b24 640883da79d9ed5262859dcda8c3c32e 05b03d984f1ab4a230242ab6b78d368d c5aaa1e6d3498d53371e84b0c1d4ba |
expected |
349b108ce08584f824bda3fb0327682baeef9296a469c008b8b7b49e |
Vector 4 — NIST SHA-3 KAT Len=512 - 64 bytes, exactly the block size, forcing an all-padding block
| Field | Value |
|---|---|
input |
e926ae8b0af6e53176dbffcc2a6b88c6 bd765f939d3d178a9bde9ef3aa131c61 e31c1e42cdfaf4b4dcde579a37e150ef bef5555b4c1cb40439d835a724e2fae7 |
expected |
1f53cf00d91cef8e082f4f2e842603e1d6ed51109d577722150d227c |
Vector 5 — NIST SHA-3 KAT Len=520 - 65 bytes, one over the block size
| Field | Value |
|---|---|
input |
16e8b3d8f988e9bb04de9c96f2627811 c973ce4a5296b4772ca3eefeb80a652b df21f50df79f32db23f9f73d393b2d57 d9a0297f7a2f2e79cfda39fa393df1ac 00 |
expected |
895bd0aece88d04e020478b65e8537ef42201d2edc78c247add4b7cf |
Vector 6 — NIST SHA-3 KAT Len=1016 - 127 bytes, one under two blocks
| Field | Value |
|---|---|
input |
a62fc595b4096e6336e53fcdfc8d1cc1 75d71dac9d750a6133d23199eaac2882 07944cea6b16d27631915b4619f743da 2e30a0c00bbdb1bbb35ab852ef3b9aec 6b0a8dcc6e9e1abaa3ad62ac0a6c5de7 65de2c3711b769e3fde44a74016fff82 ac46fa8f1797d3b2a726b696e3dea553 0439acee3a45c2a51bc32dd055650b |
expected |
ad8966767488bd49c9d84d1a112e48e7baf243f0668ac6bca3c15df5 |
Vector 7 — NIST SHA-3 KAT Len=1024 - 128 bytes, an exact multiple of the block size
| Field | Value |
|---|---|
input |
2b6db7ced8665ebe9deb080295218426 bdaa7c6da9add2088932cdffbaa1c141 29bccdd70f369efb149285858d2b1d15 5d14de2fdb680a8b027284055182a0ca e275234cc9c92863c1b4ab66f304cf06 21cd54565f5bff461d3b461bd40df281 98e3732501b4860eadd503d26d6e6933 8f4e0456e9e9baf3d827ae685fb1d817 |
expected |
7868d08191da62938d904835ef709310617d51d5d59cfaa63b2ec5a3 |