BSD-3-Clause licensed
This version can be pinned in stack with:cryptohash-sha512-,5974

Module documentation for

Depends on 2 packages(full list with versions):
Used by 1 package in lts-22.25(full list with versions):

A practical incremental and one-pass, pure API to the SHA-512, SHA512/t and SHA-384 cryptographic hash algorithms according to FIPS 180-4 with performance close to the fastest implementations available in other languages.

The core SHA-512 algorithm is implemented in C and is thus expected to be as fast as the standard sha512sum(1) tool. (If, instead, you require a pure Haskell implementation and performance is secondary, please refer to the SHA package.)

Additionally, this package provides support for

conforming to RFC6234, RFC4231, RFC5869, et al..

Packages in the cryptohash-* family

Relationship to the cryptohash package and its API

This package has been originally a fork of cryptohash-0.11.7 because the cryptohash package had been deprecated and so this package continues to satisfy the need for a lightweight package providing the SHA-512 hash algorithms without any dependencies on packages other than base and bytestring. The API exposed by cryptohash-sha512-0.11.*'s Crypto.Hash.SHA512, Crypto.Hash.SHA512t, and Crypto.Hash.SHA384 module is guaranteed to remain a compatible superset of the API provided by the cryptohash-0.11.7's module of the same name.

Consequently, this package is designed to be used as a drop-in replacement for the cryptohash-0.11.7 modules mentioned above, though with a clearly smaller footprint by almost 3 orders of magnitude.


  • Expose SHA512/t variant via new Crypto.Hash.SHA512t module
  • Expose SHA384 variant via new Crypto.Hash.SHA384 module

  • Add Eq instance for Ctx

  • add start and startlazy producing Ctx

  • Remove ineffective RULES

  • Declare Crypto.Hash.SHA512 module -XTrustworthy

  • Convert to CApiFFI

  • Added ...AndLength variants of hashing functions:

    • finalizeAndLength
    • hashlazyAndLength
    • hmaclazyAndLength
  • Minor optimizations in hmac and hash

  • First public release (unreleased)

  • new hmac and hmaclazy functions providing HMAC-SHA-512 computation conforming to RFC2104 and RFC4231
  • fix unaligned memory-accesses
  • switch to ‘safe’ FFI for calls where overhead becomes neglible
  • removed inline assembly in favour of portable C constructs
  • fix 32bit length overflow bug in hash function
  • fix inaccurate context-size
  • add context-size verification to incremental API operations (unreleased)

  • first version forked off cryptohash-0.11.7 release