Hash & Checksum Toolkit
## Overview The Hash & Checksum Toolkit API provides 35 endpoints for generating, verifying, and comparing cryptographic hashes and checksums. Supports all major algorithms. ## Key Features - **Hash Generation**: MD5, SHA-1, SHA-256, SHA-384, SHA-512, SHA3-256, SHA3-512, BLAKE2 - **HMAC**: Generate and verify HMAC signatures with any supported algorithm - **Checksum**: CRC32, Adler32 for data…
Hash & Checksum Toolkit endpoints
| Method | Endpoint | Description |
|---|---|---|
| POST |
MD5 hash /hash/md5 |
Compute MD5 hash of the input text. Note: MD5 is cryptographically broken; use SHA-256+ for security. |
| POST |
BLAKE2s hash /hash/blake2s |
Compute BLAKE2s hash with configurable digest size (1-32 bytes). Default: 32 bytes = 256-bit. |
| POST |
SHA-1 hash /hash/sha1 |
Compute SHA-1 hash of the input text. Note: SHA-1 is deprecated for security use. |
| POST |
SHA-256 hash /hash/sha256 |
Compute SHA-256 hash of the input text. |
| POST |
SHA-384 hash /hash/sha384 |
Compute SHA-384 hash of the input text. |
| POST |
SHA-512 hash /hash/sha512 |
Compute SHA-512 hash of the input text. |
| POST |
SHA3-256 hash /hash/sha3-256 |
Compute SHA3-256 (Keccak) hash of the input text. |
| POST |
SHA3-512 hash /hash/sha3-512 |
Compute SHA3-512 (Keccak) hash of the input text. |
| POST |
BLAKE2b hash /hash/blake2b |
Compute BLAKE2b hash with configurable digest size (1-64 bytes). Default: 64 bytes = 512-bit. |
| POST |
Hash with all algorithms /hash/all |
Hash the input text with ALL supported algorithms simultaneously. Returns a dictionary mapping algorithm name to hex digest. |
| POST |
Identify hash algorithm /hash/identify |
Given a hash string, identify which algorithm(s) it could be based on length/format. Pass: {"hash": "d41d8cd98f00b204e9800998ecf8427e"} |
| POST |
CRC32 checksum /checksum/crc32 |
Compute CRC32 checksum of the input string (UTF-8 encoded). |
| POST |
scrypt key derivation /derive/scrypt |
Derive a key using scrypt (RFC 7914) via hashlib.scrypt. Parameters: - n: CPU/memory cost factor (power of 2, default 16384) - r: block size (default 8) - p: parallelization… |
| POST |
Adler-32 checksum /checksum/adler32 |
Compute Adler-32 checksum of the input string (UTF-8 encoded). |
| POST |
Luhn algorithm validation /checksum/luhn |
Validate a number using the Luhn algorithm. Useful for credit card numbers, IMEI numbers, Canadian SINs, etc. Accepts digits with optional spaces/dashes. |
| POST |
Compare two texts using segment hashing /compare/diff |
Compare two texts by hashing fixed-size segments and identifying which ones changed. Each segment is split at segment_size character boundaries. Segments with different hashes… |
| POST |
ISBN-10 / ISBN-13 validation and conversion /checksum/isbn |
Validate an ISBN-10 or ISBN-13 number and cross-convert between formats. Accepts hyphens and spaces in the input (they are stripped automatically). ISBN-10 may end with 'X'. |
| POST |
EAN-13 / EAN-8 barcode validation /checksum/ean |
Validate an EAN-13 or EAN-8 barcode number. Returns the provided check digit vs the computed one. |
| POST |
MOD-97 check (IBAN validation) /checksum/mod97 |
Validate a string using the MOD-97 algorithm (ISO 7064). Used for IBAN (International Bank Account Number) validation. For IBAN, the first 4 characters are moved to the end… |
| POST |
Generate HMAC with specified algorithm /hmac/generate |
Generate an HMAC for the given message and key using the specified algorithm. Supported algorithms: md5, sha1, sha224, sha256, sha384, sha512, sha3_256, sha3_384, sha3_512,… |
| POST |
Quick HMAC-SHA256 /hmac/sha256 |
Compute HMAC-SHA256 quickly without specifying the algorithm. |
| POST |
Verify HMAC (timing-safe) /hmac/verify |
Verify an HMAC against an expected value using constant-time comparison to prevent timing attacks. Returns is_valid = true/false. |
| POST |
Quick HMAC-SHA512 /hmac/sha512 |
Compute HMAC-SHA512 quickly without specifying the algorithm. |
| POST |
Generate webhook signature /hmac/webhook |
Generate a webhook signature in the style used by GitHub, Stripe, and similar services. The signature format is: "{prefix}={hex_digest}" Example: "sha256=abc123def456..." -… |
| POST |
PBKDF2 key derivation /derive/pbkdf2 |
Derive a key using PBKDF2-HMAC. - If salt is empty, a random 32-byte salt is generated and returned in hex. - Default: SHA-256, 600,000 iterations, 32-byte output (NIST SP… |
| POST |
HKDF key derivation (RFC 5869) /derive/hkdf |
HKDF (HMAC-based Key Derivation Function) per RFC 5869. Pure Python implementation using only stdlib hmac + hashlib. - ikm: Input Keying Material (text or hex-encoded bytes if… |
| POST |
Hash a password securely /derive/password-hash |
Hash a password using PBKDF2-HMAC-SHA256 with 600,000 iterations (NIST SP 800-63B). A random 32-byte salt is generated automatically. Returns a stored_hash string in the format:… |
| POST |
Verify a password against stored hash /derive/password-verify |
Verify a plaintext password against a stored hash produced by /derive/password-hash. Uses timing-safe comparison (hmac.compare_digest) to prevent timing attacks. The stored_hash… |
| POST |
Check if text matches a given hash /compare/match |
Check whether a plaintext string, when hashed, matches the given hash string. Tries multiple algorithms based on hash length. Returns the first match found. Comparison is… |
| POST |
Timing-safe string comparison /compare/timing-safe |
Compare two strings using hmac.compare_digest (constant-time). Prevents timing attacks that leak information about where strings differ. Both strings are compared in full… |
| POST |
Hash multiple inputs, detect duplicates /compare/batch |
Hash a list of input strings and identify duplicates. Returns all hashes and groups items that produce identical hashes together. Useful for deduplication, finding collisions, or… |
| GET |
Birthday paradox collision probability /compare/collision-probability |
Calculate the probability that at least two items out of k will share the same hash in a hash space of 2^bits values (birthday paradox). Formula: P ≈ 1 - e^(-k*(k-1) / (2 *… |
| GET |
Password/key entropy calculator /compare/entropy |
Calculate the Shannon entropy of a password or key. Formula: H = length × log₂(charset_size) Supported charsets: - digits (0-9): 10 chars - lowercase (a-z): 26 chars - uppercase… |
| GET |
API info / |
Returns API metadata and the complete list of available endpoints. |
| GET |
Health check /health |
Returns the service health status and uptime. Always returns 200 if the service is running. |
Hash & Checksum Toolkit pricing
| Plan | Price | Rate limit | Quotas |
|---|---|---|---|
| BASIC | Free | — |
|
| Pro | $9.99 / month | 20 / minute |
|
| Ultra | $29.99 / month | 100 / minute |
|