Re: cryptographic hash functions versus non-cryptographic hash functions



Kristian Gjøsteen wrote:


For sure, it isn't resistant to certain preimage attacks! Preimages
of any message (pretty close, at least) at most 16 bytes long can be
trivially recovered.

As for collisions and second preimage attacks, it is provably as secure
as SHA-256.

Even further, if the length of the input is about at least 3 times as long as the block size of the hash function, it's also resistant again preimage attacks.
.