What are the standard lightweight one-way hash functions used in current Internet of Things devices?

I could find some proposal of hash functions in conference papers but I want to know the ones which are being currently used. I found no concrete answer while searching on internet.


3 Answers 3


One primitive that has gained a lot of traction in recent time is BLAKE2s, one of the SHA-3 runner ups, which is often prefered to the actual SHA-3 winner because of its performance.

Another option would be to use a sponge construction with a dedicated lightweight permutation function like Quark or Photon.

  • $\begingroup$ Just a bit more help. Do you know of any resource that compares Blake against Quark? $\endgroup$ Apr 4, 2017 at 8:56
  • 1
    $\begingroup$ A nice overview about lightweight hashes can be found here: cryptolux.org/index.php/Lightweight_Hash_Functions Unfortunately, they do not feature blake2s. $\endgroup$
    – mat
    Apr 4, 2017 at 9:12
  • $\begingroup$ Note that BLAKE2 was not part of the SHA-3 competition. It is a "successor" (?) of BLAKE which was part of the competition. $\endgroup$
    – SEJPM
    Apr 5, 2017 at 9:11

Here you have a study about different cryptographic methods in different IoT devices:

Midgar: Study of communications security among Smart Objects using a platform of heterogeneous devices for the Internet of Things

In this study, the authors (Sánchez-Arias, García, and García-Bustelo) explain the time that the different methods need to send messages and a comparison between the methods, about their current state and about the time that they needed.


In last years, the Internet of Things has been a revolution in terms of applications and research. Currently, there are a great variety of nodes connected to each other to create different applications in areas, ranging from sport to business, inter alia. These applications compromise our private information about our bank accounts, health, and location. This makes us take safety measures to achieve a secure communication, where the interception of a message by a malicious user cannot compromise our privacy.


You should take a look at ISO/IEC 29192 which is a standard for lightweight cryptography that specifies several techniques for block/stream ciphers, asymmetric techniques and hash functions.

Specifically, the fifth subsequent part ISO/IEC 29192-5 is about hash functions and specifies three such functions suitable for applications requiring lightweight cryptographic implementations: PHOTON, SPONGENT and Lesamnta-LW.

  • $\begingroup$ Spongent is SLOOOOOW. $\endgroup$
    – Biv
    Apr 5, 2017 at 13:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.