Google Security Blog. ↑ Without truncation, the full internal state of the hash function is known, regardless of collision resistance. If the output is truncated, the removed part of the state must be searched for and found before the hash function can be resumed, allowing the attack to proceed. ↑ "The Keccak sponge function family". Retrieved 2016-01-27. ↑ SUPERCOP Benchmarks Measurements of hash functions, indexed by machine ↑ "SUPERCOP".