>just truncate sha-256 A proper solution would be to define SHA-160, similarly to how SHA-224 is defined, i.e. you would use a different initialization constan

>just truncate sha-256 A proper solution would be to define SHA-160, similarly to how SHA-224 is defined, i.e. you would use a different initialization constant and truncate output of the core SHA-256 algorithm. But I guess, it would be a bit more difficult to implement than simply truncating output of an existing SHA-256 implementation.