Hash Calculator — MD5 / SHA 哈希值计算器 — MD5 / SHA
Hash Algorithm Security Comparison
MD5 (128-bit / 32 hex chars) — Collision vulnerabilities proven in 2004. Not for security purposes; still useful for checksums and file integrity verification.
SHA-1 (160-bit / 40 hex chars) — Practically broken by Google's SHAttered attack (2017); deprecated by all modern browsers and CAs.
SHA-256 (256-bit / 64 hex chars) — The current security gold standard, used in TLS certificates, Bitcoin, and code signing.
SHA-512 (512-bit / 128 hex chars) — Faster than SHA-256 on 64-bit systems; provides a larger security margin.
⚠️ Never Use These for Password Storage
General-purpose hash functions are designed to be fast, making them vulnerable to brute-force and rainbow table attacks. For storing passwords, always use purpose-built slow hash functions: bcrypt, scrypt, or Argon2 (the Argon2id variant is the current recommendation from OWASP).
哈希算法安全性对比
MD5(128 位 / 32 个十六进制字符) — 2004 年被证明存在碰撞漏洞,不应用于安全目的,但仍可用于校验和与文件完整性验证。
SHA-1(160 位 / 40 字符) — 已被 Google 的 SHAttered 攻击(2017 年)实际破解,所有现代浏览器和 CA 均已弃用。
SHA-256(256 位 / 64 字符) — 当前安全黄金标准,用于 TLS 证书、比特币、代码签名。
SHA-512(512 位 / 128 字符) — 在 64 位系统上比 SHA-256 更快,安全边际更大。
⚠️ 绝不可将以上算法用于密码存储
通用哈希函数设计为高速计算,容易被暴力破解和彩虹表攻击。存储密码必须使用专为此设计的慢哈希算法:bcrypt、scrypt 或 Argon2(OWASP 当前推荐 Argon2id 变体)。