Rust crate alternatives · data Oct 24, 2026
Alternatives to sha1
Short answerThe closest alternatives to sha1 on crates.io data are sha-1 (196K real downloads a day), sha2 (3.5M real downloads a day), hmac (2.1M real downloads a day). Of the 8 we list, the most used is sha2, and 6 shipped a release in the last year. sha1 itself gets 2,004,209 a day with 2,496 dependents.
Every alternative we found
| Alternative | Real downloads a day | vs sha1 | Dependents | Last release | Why it is listed | |
|---|---|---|---|---|---|---|
| sha-1 Established | 196,391 | 0.10x | 313 | 3.9y | category Cryptography, category No standard library, keyword "crypto", keyword "digest" | side by side |
| sha2 Foundational | 3,510,276 | 1.75x | 22,608 | 12d | category Cryptography, category No standard library, keyword "digest", keyword "hash" | side by side |
| hmac Widely used | 2,124,794 | 1.06x | 4,359 | 7mo | category Cryptography, category No standard library, keyword "crypto", keyword "digest" | side by side |
| md-5 Widely used | 1,344,840 | 0.67x | 1,435 | 7mo | category Cryptography, category No standard library, keyword "digest", keyword "hash" | compare |
| tiny-keccak Established | 680,461 | 0.34x | 457 | 6.6y | category Cryptography, category No standard library, keyword "crypto", keyword "hash" | compare |
| sha3 Widely used | 573,618 | 0.29x | 1,767 | 5mo | category Cryptography, category No standard library, keyword "digest", keyword "hash" | compare |
| blake2 Established | 502,276 | 0.25x | 839 | 59d | category Cryptography, category No standard library, keyword "digest", keyword "hash" | compare |
| md5 Widely used | 483,598 | 0.24x | 1,213 | 4mo | category Cryptography, keyword "digest", keyword "hash" | compare |
How to choose
- Same job, not the same API. Each line is listed because it shares a crates.io category or keyword with sha1; read its description before you swap.
- More dependents means more answered questions and a smaller chance it disappears.
- Check the last release against how fast you need fixes. For sha1: is it still maintained?
Rules
Alternatives = tracked crates (top 1000 by downloads) that share a specific crates.io category (2 points each) or keyword (3 points each) with sha1, most similar first; its own parts (same name prefix) and crates it depends on or that depend on it are left out, because those are companions, not substitutes. Real downloads = quiet-day median, crates.io data Oct 24, 2026. Built when we find 3 or more.
Up next
The closest alternative: Established and quiet for years. 196,391 real downloads a day.sha-1Rust crate. SHA-1 hash function. This crate is deprecated! Use the sha1 crate instead. Real use: 196K downloads a day on quiet days; 313 crates depend on it.Read it next →Also worth your time