SHA-3, BLAKE2, Keccak and RIPEMD calculator
Compute the hash functions outside the standard set - SHA-3, Keccak, BLAKE2, and RIPEMD-160 - when SHA-2 does not match.
Open in ctfpalWhen a 64-character digest does not match SHA-256, the next candidates are SHA3-256, Keccak-256, and BLAKE2s - all the same length, all different functions. Computing them all and comparing is faster than reasoning about which one the challenge meant.
SHA-3 is not Keccak
This distinction catches people constantly. SHA-3 is standardised Keccak with a different padding rule, so SHA3-256 and Keccak-256 of the same input give completely different digests. Ethereum uses original Keccak-256, not SHA-3 - so blockchain challenges want Keccak while everything post-2015 that says SHA-3 wants SHA-3.
- SHA-3 / Keccak - sponge construction, so immune to length extension.
- BLAKE2b / BLAKE2s - fast, with configurable output length and an optional key that makes it a MAC directly.
- RIPEMD-160 - 40 hex characters, same as SHA-1. Used in Bitcoin addresses, so a 40-character hash in a crypto-currency context is likely this rather than SHA-1.
Part of a module
3. Hashes, identification and cracking
Identify a digest by shape, understand why hashing is one-way, and learn where wordlist cracking works and where it is a trap.
Practise on real challenges
Related tools
MD5, SHA-1 and SHA-256 hash generator
Compute MD5, SHA-1, SHA-256, SHA-384, and SHA-512 of any text in the browser, using Web Crypto. Nothing is sent anywhere.
Hash identifier with hashcat mode lookup
Identify a hash from its shape and prefix - MD5, SHA family, bcrypt, NTLM, and the salted formats - and get the hashcat mode number to crack it.
Hash length extension attack
Append data to a message and forge a valid MD5, SHA-1, or SHA-256 signature without knowing the secret - the Merkle-Damgard flaw behind `hash(secret || message)`.
Base58, UUID and colour utilities
Decode Base58 and Base58Check, inspect UUID versions and embedded timestamps, and convert colour notations.