Reference category
Security
A cryptographic hash maps any input to a fixed-length digest. That makes it useful for integrity checks and for storing password verifiers, but the security properties differ: fast hashes such as SHA-256 are designed for integrity and are unsuitable for passwords, while bcrypt, scrypt and Argon2 are deliberately slow and memory-hard.
The entries state the output size, the collision and preimage assumptions, and the correct use of each function. A hash is not encryption and cannot be reversed; when a page says “hash a password”, the choice of algorithm and its parameters matter more than the digest length.
Reference sets in this category (1)
All 8 entries
Hash Algorithm Reference 8 entries
MD5MD5 produces a 128-bit digest and is broken for security use.
SHA-1SHA-1 produces a 160-bit digest and is deprecated because collisions are practical.
SHA-256SHA-256 produces a 256-bit digest and is the default choice for integrity and signatures.
SHA-512SHA-512 produces a 512-bit digest and is efficient on 64-bit processors.
SHA-3SHA-3 is the Keccak sponge family, standardized separately from SHA-2.
bcryptbcrypt is an adaptive password hash based on Blowfish with a tunable cost factor.
scryptscrypt is a memory-hard key derivation function with tunable memory and CPU cost.
Argon2Argon2 is the Password Hashing Competition winner and the current recommended password hash.