SHA3-512 Hash Generator

Generate the widest SHA-3 digest, 512 bits printed as 128 hexadecimal characters.

Text
SHA3-512 digest
Runs locally in your browser

About the SHA3-512 Hash Generator

SHA3-512 is the largest fixed length output in FIPS 202, offering about 256 bits of collision resistance. Its sponge absorbs just 72 bytes of message per permutation, reserving 1024 bits of the state as capacity, which is what pays for that margin. In exchange it is the slowest member of the family by a comfortable distance, so it belongs where a long term guarantee matters more than throughput.

People reach for it when a digest has to outlive the system that made it. Archival manifests, notarisation records, root keys committed to paper, and long horizon signature schemes all favour a wide output on the reasoning that halving the security level through some future cryptanalytic advance would still leave plenty. It is also a convenient source of 64 bytes of deterministic material when a protocol wants to split a digest into two independent halves.

The Keccak internals here are identical to the rest of the family, only the rate and the capacity change. That means the same protection against length extension applies, and the same warning about Keccak-256 applies too: Ethereum tooling uses the pre standard padding, so its 512-bit values will not match these. Input is read as UTF-8 and hashed by a WebAssembly build in the page, so pasting confidential text is safe and long documents finish quickly. Use the Upload button for files. If 128 characters is more than the field you are filling can take, SHA3-384 or SHA3-256 are the shorter options, and SHAKE256 lets you name any length you like.

How to use

  1. Enter the record or document text you want to commit to on the left.
  2. Keep the output as hex for manifests, or switch to Base64 to shorten it for transport.
  3. Load a file with Upload when you need the digest of an artefact rather than pasted text.
  4. Copy or download the 128 character digest.

Common questions

Is SHA3-512 overkill for file integrity?
For ordinary downloads yes, since 256 bits already exceeds any practical attack. It earns its place when the record has to stay trustworthy for decades.
How does it differ from SHA-512?
Only the length matches. SHA-512 belongs to the SHA-2 family and uses a Merkle Damgard chain, while SHA3-512 is a Keccak sponge with entirely different internals and no length extension weakness.
Why is SHA3-512 slower than SHA3-256?
It absorbs 72 bytes per permutation instead of 136, so nearly twice as many permutation calls are needed for the same message.
Can I use part of the digest?
Truncating a SHA-3 digest is safe and gives the security of the shorter length, though naming the length explicitly with SHAKE256 documents the intent better.