RIPEMD-160 Hash Calculator

What is RIPEMD-160?

RIPEMD-160 (RACE Integrity Primitives Evaluation Message Digest, 160-bit) is a cryptographic hash function designed by Hans Dobbertin, Antoon Bosselaers, and Bart Preneel in 1996 as part of the EU RIPE project. It produces a fixed 160-bit (20-byte) hash value, typically rendered as a 40-character hexadecimal string.

How does RIPEMD-160 work?

RIPEMD-160 processes input in 512-bit blocks. The message is first padded so its length is congruent to 448 mod 512, then the original length is appended as a 64-bit integer. Each block is processed through two independent parallel paths of five rounds (80 operations total per path), each using distinct nonlinear Boolean functions, modular addition, and bitwise left-rotation. The results of both paths are combined with the previous state to produce the final 160-bit digest.

What is RIPEMD-160 used for?

RIPEMD-160 is notably used in Bitcoin address derivation (applied after SHA-256 to produce shorter addresses), PGP/GPG key fingerprints, and various cryptocurrency protocols. It also serves as a general-purpose integrity check where a 160-bit digest is preferred over longer alternatives.

Can RIPEMD-160 be reversed or cracked?

RIPEMD-160 is a one-way function: there is no mathematical inverse. No practical collision attacks have been demonstrated against the full 160-bit version — theoretical attacks exist only against reduced-round variants. For short or common strings, precomputed rainbow tables could recover inputs, but for high-entropy inputs this remains computationally infeasible.

Is RIPEMD-160 safe for passwords?

RIPEMD-160 has no known practical vulnerabilities, but like all general-purpose hash functions it is designed to be fast — which benefits brute-force attackers. For password storage, use a purpose-built, deliberately slow hashing algorithm such as bcrypt, scrypt, or Argon2, which incorporate salting and adjustable work factors.

How does RIPEMD ensure privacy?

RIPEMD performs all hashing entirely inside your browser using the CryptoJS JavaScript library. No text, no file data, and no hash output is ever transmitted to any server. You can verify this by running the tool while offline — it will work identically.