> Does anyone know why hash algorithms keep using such small state sizes, leaving us vulnerable to this same issue? Because small internal state is not actuall

> Does anyone know why hash algorithms keep using such small state sizes, leaving us vulnerable to this same issue? Because small internal state is not actually the issue. SHA-1 was broken with 2^63 work, not 2^80 work. That discrepancy is why SHA-1 was deemed broken back in 2005, not because people regularly do 2^80 work.