SHA-384 Hash Calculator

SHA-384 produces a 384-bit (48-byte) hash value, represented by 96 hexadecimal characters.

What is SHA-384?

SHA-384 is a cryptographic hash function in the SHA-2 family. It converts input data into a fixed-length 384-bit hash, commonly represented as 96 hexadecimal characters. SHA-384 uses the SHA-512 compression function with different initial values and a truncated output.

The same input always produces the same hash. Even a small change in the input will usually produce a substantially different result. This makes SHA-384 useful for data integrity verification and digital signatures. SHA-384 is a one-way function: it is not designed to recover the original data from a hash.

How long is a SHA-384 hash?

A SHA-384 hash is 384 bits (48 bytes) long, or 96 hexadecimal characters. SHA-384 processes input in 1024-bit blocks and uses 80 rounds of compression per block.

Where is SHA-384 used?

  • TLS and certificates: SHA-384 is used in TLS cipher suites such as TLS_AES_256_GCM_SHA384 and in some digital-signature configurations.
  • High-assurance systems: SHA-384 is specified in security profiles requiring stronger hash collision resistance.
  • JSON Web Tokens (JWT): Algorithms including HS384, RS384, and ES384 use SHA-384.
  • Integrity checks: SHA-384 can verify data against a trusted checksum and is supported by Subresource Integrity (SRI) in web browsers.

SHA-384 vs SHA-256 and SHA-512

SHA-384 provides approximately 192-bit collision resistance, compared with 128-bit collision resistance for SHA-256.

SHA-384 uses the same compression function as SHA-512 but has different initial values and a shorter output. Performance depends on the device and implementation; on some 64-bit systems, SHA-384 and SHA-512 can outperform SHA-256.

SHA-384's truncated internal state also makes the usual length-extension attack against a complete Merkle–Damgård hash output impractical. For message authentication, use HMAC rather than relying on a plain hash.

Is SHA-384 secure?

SHA-384 remains suitable for modern cryptographic applications, with no known practical collision or preimage attacks against the full algorithm.

However, SHA-384 should not be used alone for password storage. Use a dedicated password-hashing algorithm such as Argon2id, scrypt, or bcrypt. When checking file integrity, a matching hash is meaningful only if the expected hash was obtained from a trusted source.

This calculator converts text to UTF-8 and computes its hash locally in your browser using the Web Crypto API. Your input is not sent to a server for hashing.

Last updated:

© 2008–2026 XORBIN.COM. All rights reserved.