SHA-3 uses the same Merkle-Damgard iterated construction as MD-5 and SHA-1/SHA-2

SHA-3 supports the same Message Digest sizes as SHA-2, i.e., 224, 256, 384, and 512 bits

SHA-3 is not meant to replace SHA-2 (at least not yet), as SHA-2 is still considered secure.

SHA-3's underlying Keccak function allows for not only ingesting arbitrary length input ("absorbing phase") but also arbitrary length output ("squeezing phase").

... exist for arbitrary long passwords.

... are slower to use than a simple hash-lookup table.

... are smaller than a simple hash-lookup table.

... require a special class of reduction functions that map a hash value to a password.

HMAC supports more hash functions (e.g., MD5, SHA1)

H(m||K) is vulnerable to a length-extension attack

It is faster

The simple construct H(m||K) allows an attacker to pre-compute message pairs for a birthday collision - HMAC does not 

... is a so-called ''keyed hash'' function.

... is an authentication protocol for key distribution.

... is a tool for email encryption.

... was one of the finalist block ciphers of the AES challenge.

MAC = hash(hash(key||message))

MAC = half of hash(key||message)

MAC = hash(key||message)

MAC = hash(message||key)

username, salt, hash(salt||password)

username, salt, hash(password)

username, hash(salt||password)

username, hash(salt), hash(salt||password)

Someone was able to brute-force its n-bit key in less than 2^(n-1) steps.

Someone was able to find a collision in less than 2^(k/2) steps (for a k-bit hash)

Someone found a collision, i.e., two pre-images x<>y that hash to the same image h( x ) = h( y )

Someone found a pre-image to a given image (i.e., the one-wayness has been broken)

SHA-1 supports key sizes of up to 160 bits while MD5 only has 128-bit keys

SHA-1 is more computationally expensive than MD5

MD5 does not work on an extremely large input (over 2^64 bits) while SHA-1 does

MD5, also called SHA-3, is an updated version of SHA-1

Most modern security protocols use an ECC cipher by default

According to the NSA, ECC ciphers are more resistant to quantum computer attacks than RSA

ECC keys are significantly shorter than RSA keys for the same level of security

The security of ECC relies on solving the elliptic curve discrete log problem (ECDLP), which should be hard