Advertisements

headerup to 320x100 / 728x90

SHAKE-256 Hash Generator

Generate an extendable-output (XOF) SHAKE-256 hash from any text, with a configurable digest length for custom use-cases.

Input
Loading editor...
Output

Output will appear here...

Advertisements

content bottomup to 300x250

What is SHAKE-256 Hash Generator

Last reviewed:

SHAKE-256 Hash Generator computes an extendable-output function (XOF) from the FIPS 202 Keccak family. You can request any output length in bits and the tool returns the matching hexadecimal digest.

XOFs such as SHAKE-256 are useful when you need a hash with a non-standard length — for key derivation, custom identifiers, or zero-knowledge proof systems where the protocol specifies an exact bit size.

Why use it

  • Get hash output of any bit length, not just 256 or 512 bits.
  • Derive material for zero-knowledge proofs and modern cryptographic protocols.
  • Match output lengths required by ML-KEM, ML-DSA, SPHINCS+ or custom schemes.
  • Run quick reference-vector checks against library output.
  • Avoid concatenating fixed-length hashes to reach a custom size.

Features

  • Configurable output bit length
  • FIPS 202 SHAKE-256 XOF implementation
  • Great for post-quantum protocol prototyping
  • Client-side hashing — no upload
  • Hex output for direct pasting into code

How to use SHAKE-256 Hash Generator

  1. Paste your input. Drop the text or seed material into the input panel.
  2. Pick an output length. Use the option controls to select your desired bit length (default 256).
  3. Copy the digest. The output panel shows the hex digest at the requested length for copying.

Example (before/after)

Plain text input (256-bit output)

hello

SHAKE-256 hex digest

8eb4b6a932f280335ee1a279f8c208a349e7bc65daf831d3021c213825292463

Common errors

Requesting too small an output

Very short lengths like 32 bits have weak collision resistance and should not be used for security-sensitive identifiers.

Fix: Use 128 bits or more for anti-collision properties in the real world.

Treating SHAKE-256 as SHA-3 directly

SHAKE-256 at a 256-bit length is not the same as SHA3-256 — they use different domain separation.

Fix: Pick the SHA3-256 tool when you specifically need FIPS 202 SHA3-256 output.

Assuming deterministic output across bit lengths

Different requested lengths are prefixes of the same squeeze; changing a length changes the output.

Fix: Always request the final output length your protocol expects.

FAQ

What is an extendable-output function?

An XOF can produce an output of any length from a single input, unlike a classic hash that has one fixed output size.

Is SHAKE-256 standardized?

Yes. It is specified in NIST FIPS 202 alongside SHA3 and SHAKE-128.

How is it different from SHA3-256?

Both use Keccak, but SHAKE-256 is a variable-length XOF with different domain-separation bits. Outputs differ.

What output length should I use?

Use the length your protocol specifies. For general fingerprints, 256 bits is a safe default.

Is it available in standard libraries?

Most modern crypto libraries in Node.js, Go, Rust, and Python support SHAKE-256.

Does it run locally?

Yes. The tool hashes your input in the browser.