A Fast New Cryptographic Hash Function (Designed in 1995)
Tiger is a fast new hash function, designed to be very fast on modern computers, and in particular on the state-of-the-art 64-bit computers (like DEC-Alpha), while it is still not slower than other suggested hash functions on 32-bit machines (well, not any more, after MD5 and SHA-1 were broken).
On DEC-Alpha, Tiger hashes more than 132Mbits per second (measured on Alpha 7000, Model 660, on one processor). On the same machine, MD5 hashes only about 37Mbps (this is probably not the best optimized md5 code). On 32-bit machines, the code of Tiger is not fully optimized. Still is hashes faster than MD5 on 486s and Pentiums. We conjecture that Tiger hashes faster than MD5 even on 16-bit machines. Performance of Tiger was measured by NESSIE. See tables and figures in pages 57, 70, and 108-118 of the NESSIE performance document.
Tiger has no usage restrictions nor patents. It can be used freely, with the reference implementation, with other implementations or with a modification to the reference implementation (as long as it still implements Tiger). We only ask you to let us know about your implementation and to cite the origin of Tiger and of the reference implementation.
We urge people to study the strength of Tiger; we will appreciate attacks, analysis and any other comments. This page will maintain the latest information on the current status of Tiger, an updated copy of the paper, reference implementations, and the S box generation program. You are welcome to look at this page once in a while to get the latest news.
(thanks to Clinton Wong)
A source code in Java is available from Cryptix.
Some other implementations of Tiger (we did not check them): Tiger for Z80