Crates / Compare / hmac vs sha1
Rust crates side by side · data Oct 24, 2026
hmac vs sha1
Short answerBy steady daily use, hmac is bigger: 2,124,794 real downloads a day against 2,004,209 for sha1 (1.1x). 4,359 crates depend on hmac and 2,496 on sha1. hmac last shipped 7 months ago, sha1 3 months ago.
hmac
Widely usedWidely used and steady.
4,359 crates depend on it; no release in the last 90 days, so its count is all steady use.
Generic implementation of Hash-based Message Authentication Code (HMAC)
sha1
Widely usedWidely used and steady.
2,496 crates depend on it; no release in the last 90 days, so its count is all steady use.
SHA-1 hash function
hmacsha1 · 100% = that crate's normal quiet day, so a spike to 300% is triple its usual traffic
How they relate
- Often used together: 1 tracked crate depend on both (zip). They are not always either/or.
Every number, side by side
| Same window, same method | hmac | sha1 |
|---|---|---|
| Real downloads a day | 2,124,794 | 2,004,209 |
| Crates that depend on it | 4,359 | 2,496 |
| Last release | 0.13.0, 7 months ago | 0.10.7, 3 months ago |
| Trend vs the field | +3% | +8% |
| Release-window share | 0.0% | 0.0% |
| Downloads in the window | 195,364,699 | 188,159,457 |
| All-time downloads | 680,743,893 | 612,772,812 |
| Versions published | 38 | 35 |
| License | MIT OR Apache-2.0 | MIT OR Apache-2.0 |
| MSRV | 1.85 | not set |
| First published | Oct 6, 2016 | Nov 21, 2014 |
Which to pick
- Downloads tell you what is common, not what fits. Each crate's own description above says what it is for; when the jobs differ, pick by the job.
- When both fit, prefer the one more crates depend on (hmac, 4,359 dependents): more eyes, more answered questions, and you may already have it in your tree.
- Check the release dates against your own pace: hmac 7 months ago, sha1 3 months ago.
Also in this space
Method
Real downloads = the median day with no release that day or the day before, from the crates.io API (Jul 27, 2026 to Oct 23, 2026). Raw crates.io counts include CI and bots and run high (why); the method is from our 90-day study.
Up next
Another comparison: Same method, same window. Foundational and steady vs widely used and steady.reqwest vs ureqRead it next →Also worth your time