Introduction
RIPEMD-160 (RACE Integrity Primitives Evaluation Message Digest) is a 160-bit cryptographic hash function developed in the 1990s by Hans Dobbertin, Antoon Bosselaers, and Bart Preneel. It produces a 40-character hexadecimal digest and is used in Bitcoin address generation, PGP, and OpenPGP. This tool generates RIPEMD-160 hashes entirely in your browser.
What this tool does
- Generates RIPEMD-160 hashes from any text input in real time as you type.
- Produces a fixed 160-bit (40 hex character) digest.
- Implements the full RIPEMD-160 algorithm using native 32-bit arithmetic.
- Displays the hash as a lowercase hexadecimal string.
- Processes all data locally in your browser with no network requests.
How this tool works
Type or paste text into the input field. The tool converts the text to UTF-8 bytes and processes them through the RIPEMD-160 compression function. The hash updates instantly as you type. All computation happens client-side using a pure JavaScript implementation with native 32-bit operations.
How RIPEMD-160 works
RIPEMD-160 was developed as part of the EU project RIPE (RACE Integrity Primitives Evaluation) from 1992 to 1996. It is a strengthened version of MD4 and MD5, using two parallel chains of 5 rounds each (80 rounds total). Each chain processes 512-bit blocks and produces 160-bit intermediate values that are combined at the end. The two parallel chains use different Boolean functions and constants, making the algorithm more resistant to differential cryptanalysis than its predecessors. RIPEMD-160 is most famous for its role in Bitcoin: addresses are generated by computing `RIPEMD-160(SHA-256(public_key))`, creating a 160-bit hash of the public key. It is also used in PGP (Pretty Good Privacy) and OpenPGP for message integrity. While SHA-1 has been broken (SHAttered attack in 2017), RIPEMD-160 remains unbroken despite its similar structure, though it is being phased out in favor of SHA-256 and SHA-3 for new applications.
How to use this tool
- Enter the text you want to hash in the input field.
- The RIPEMD-160 hash appears instantly in the output field as a 40-character hex string.
- Use the Copy button to copy the hash to your clipboard.
- Change the input at any time and the hash updates automatically.
Real-world examples
Hashing a simple string
Input: `hello`. Output: `aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d`. The same input always produces the same 160-bit output.
Bitcoin address derivation
In Bitcoin, a public key is first hashed with SHA-256, then the result is hashed with RIPEMD-160. This tool can perform the second step if you provide the SHA-256 hash as input bytes.
Empty input
Input: empty string. Output: `9c1185a5c5e9fc54612808977ee8f548b2258d31`. RIPEMD-160 handles zero-length messages correctly.
Comparison with similar methods
| Method | Complexity | Typical use |
|---|---|---|
| RIPEMD-160 | O(n) — 80 rounds per 64-byte block | Bitcoin addresses, PGP, OpenPGP |
| SHA-1 | O(n) — 80 rounds per 64-byte block | Legacy (broken by SHAttered attack) |
| SHA-256 | O(n) — 64 rounds per 64-byte block | Modern security, TLS, blockchain |
| MD5 | O(n) — 4 rounds per 64-byte block | Legacy checksums (broken) |
Limitations or considerations
RIPEMD-160 produces a 160-bit digest, which is shorter than modern standards recommend (256-bit minimum). While no practical attacks exist, its 160-bit output size means it provides only 80 bits of collision resistance, below the 112-bit minimum recommended by NIST for new applications. For new security-critical applications, use SHA-256 or BLAKE2b. This tool does not support keyed hashing.
Frequently asked questions
Is RIPEMD-160 still secure?
RIPEMD-160 has no known practical attacks and remains secure for its current use cases (Bitcoin, PGP). However, its 160-bit output provides only 80 bits of collision resistance, which is below modern recommendations. Use SHA-256 or BLAKE2b for new applications.
Why is RIPEMD-160 used in Bitcoin?
Bitcoin uses RIPEMD-160(SHA-256(public_key)) to create shorter addresses. When Bitcoin was designed (2008-2009), RIPEMD-160 was widely used and considered secure. The combination of SHA-256 and RIPEMD-160 provides defense in depth.
What is the difference between RIPEMD-160 and SHA-1?
Both produce 160-bit digests with similar structures, but RIPEMD-160 uses two parallel chains while SHA-1 uses a single chain. SHA-1 was broken by the SHAttered attack in 2017, while RIPEMD-160 remains unbroken.
Can I use RIPEMD-160 for password hashing?
No. RIPEMD-160 is a plain hash function without salting or work factors. Use Argon2, bcrypt, or PBKDF2 for password storage.
Conclusion
The RIPEMD-160 hash generator provides a fast, accurate implementation of this historic hash function. It is particularly useful for Bitcoin development, PGP compatibility, and educational purposes. For new security-critical applications, consider using SHA-256 or BLAKE2b, which offer larger digest sizes and meet modern security recommendations.