What is a cryptographic hash?
A cryptographic hash turns any input into a fixed-size digest (32 bytes for SHA-256) such that the same input always gives the same digest, a one-character change gives a completely different one, and the input cannot be recovered from the output. Hashes verify file integrity, fingerprint content and underpin signatures and HMAC. SHA-256 and the SHA-2 family are current; MD5 and SHA-1 are broken against deliberate collisions and should only be used as checksums.
Security note: A plain hash is not a password store. Passwords need a slow, salted algorithm — Argon2id, scrypt or bcrypt — because SHA-256 and MD5 can be tried billions of times per second.
How to use SHA-384 Generator
- Paste the text.
- Choose Base64 for SRI or hex for general use.
- Copy the digest.
SHA-384 Generator features
- SHA-384 via WebCrypto
- Hex, Base64 (ideal for Subresource Integrity), Base64url and binary output
- Expected-hash comparison
- Live results
SHA-384 Generator example
SHA-384 of "abc"
Input:
abcOutput:
cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7Frequently asked questions about SHA-384 Generator
Where is SHA-384 used?
In TLS cipher suites such as ECDHE-RSA-AES256-GCM-SHA384, in Subresource Integrity attributes (integrity="sha384-…") and in certificates that need a security level above SHA-256.
How do I build an SRI hash?
Hash the exact file bytes with SHA-384, encode the digest as Base64 and prefix "sha384-". For script text pasted here, choose the Base64 output; for files use "openssl dgst -sha384 -binary file | openssl base64 -A".
How does SHA-384 relate to SHA-512?
SHA-384 is SHA-512 with different initial values and the output truncated to 384 bits. It resists length-extension attacks better than SHA-256 because of that truncation.
Technical notes
SHA-384 is a truncated variant of SHA-512 with distinct initial values, producing a 384-bit digest. It is widely used in TLS cipher suites and SRI attributes.
References
- FIPS 180-4: Secure Hash Standard (SHS)The US federal standard that specifies the SHA-1 and SHA-2 family of hash functions.
- RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)Reference descriptions and code for SHA-1, SHA-224/256/384/512 and their use in HMAC.
- RFC 1321: The MD5 Message-Digest AlgorithmThe original MD5 definition. MD5 is now considered broken for signatures and passwords; it remains useful only as a checksum.