suppose we need/prefer 128 bit hash output. for example to generate a 128 bit encryption key or, in other applications (e.g. file integrity verifications), to consume less storage space.
i don't know of any new/standard/unbroken 128 bit hash function. do u?
so seems we have to use SHA256.
my question is: is truncating SHA256 output to 128 bits acceptable?
does such a truncated hash have a security equal to a 128 bit hash?
i mean a 128 bit hash that has no known vulnerabilities; definitely not MD5!
also i got another idea how to accomplish this:
but i don't know if this can do any benefit/detriment to the security!!