Does SHA-1 meet the strict avalanche criterion? I've been looking for a paper to cite on this, but haven't found one.
It's something that seems to be easy to check (in "On the Design of S-Boxes", Webster & Tavares lay out how it can be done), so it is surprising to not find a paper on it. Has it been put down as a small result in some other paper? Or has the SAC been discarded as a useful metric? Or have I somehow missed the relevant paper (accept my apologies if so!)? Any pointers would be gratefully appreciated.
Edit: is Hash function balance and its impact on birthday attacks relevant? Is the "balance" metric simply a better/different way of expressing the SAC?