SHA3-224 Hash Generator

Generate SHA3-224 hashes online instantly. Implements the NIST FIPS 202 SHA-3 standard with Keccak sponge construction. 224-bit output. Supports UTF-8, Hex, Base64 input and HMAC-SHA3-224.

Input
Output
Share Link
Settings

Related Hash Tools

Frequently Asked Questions

What is SHA3-224?
SHA3-224 is the 224-bit variant of the SHA-3 family, standardized in NIST FIPS 202 (2015). It uses the Keccak sponge construction with a 1152-bit rate and 448-bit capacity. It produces a 56-character hexadecimal digest.
Is SHA3-224 the same as Keccak-224?
No. When NIST standardized Keccak as SHA-3, they added a domain separation byte (0x06) to the padding. The original Keccak-224 uses 0x01 padding. They produce different outputs for the same input.
When should I use SHA3-224 vs SHA-224?
SHA3-224 and SHA-224 both produce 224-bit outputs but use completely different constructions (Keccak sponge vs Merkle-Damgård). Use SHA3-224 when you specifically need SHA-3 family compliance, e.g., for FIPS 202 requirements or post-SHA-2 transition plans.
What is HMAC-SHA3-224?
HMAC-SHA3-224 is a keyed message authentication code using SHA3-224. It combines a secret key with the message to produce a 224-bit authentication tag, verifying both integrity and authenticity.

About SHA3-224 Hash Generator

SHA3-224 is the smallest member of the SHA-3 family, standardized in NIST FIPS 202 (August 2015). Unlike SHA-2 which uses the Merkle-Damgård construction, SHA-3 is built on the Keccak sponge function, which absorbs input data and squeezes out the hash. SHA3-224 uses a 1152-bit rate with 448-bit capacity, producing a 224-bit (28-byte, 56-character hex) digest.

Keccak Sponge Construction

The Keccak sponge operates on a 1600-bit state organized as a 5×5 array of 64-bit lanes. During the absorbing phase, input blocks XOR into the rate portion of the state, followed by the Keccak-f[1600] permutation. In the squeezing phase, output bits are extracted from the rate portion. This design is fundamentally different from SHA-2 and immune to length-extension attacks.

SHA3-224 vs Keccak-224

When NIST finalized the SHA-3 standard, they added a 2-bit domain suffix (binary 01) before padding, changing the final padding byte from 0x01 to 0x06. This means SHA3-224 and the original Keccak-224 produce different outputs for the same input. This tool implements the NIST FIPS 202 SHA3-224 standard.

Use Cases

SHA3-224 is suitable for applications requiring FIPS 202 compliance, digital signatures, certificate fingerprints, and message integrity verification where a 224-bit security level is sufficient. It provides equivalent security to SHA-224 with a more modern construction.