CyberGlossary

Cryptography

BLAKE2

Also known as: BLAKE2b, BLAKE2s, RFC 7693

Definition

A fast, modern cryptographic hash function specified in RFC 7693, offering security comparable to SHA-3 with significantly higher performance in software.

BLAKE2 is a hash function family designed by Aumasson, Neves, Wilcox-O'Hearn and Winnerlein in 2012 as a refinement of the SHA-3 finalist BLAKE. It comes in two main variants: BLAKE2b (up to 64-byte digests, optimised for 64-bit platforms) and BLAKE2s (up to 32-byte digests for 32-bit platforms), with parallel versions BLAKE2bp/BLAKE2sp. BLAKE2 is built on the HAIFA construction over a ChaCha-style permutation and natively supports keyed hashing, salting, personalisation and tree hashing without a separate HMAC wrapper. It is unbroken, faster than SHA-2/SHA-3 in software, and is used in Argon2, libsodium, WireGuard handshake hashing and Zcash.

Examples

  • Argon2 uses BLAKE2b internally as its compression primitive.
  • WireGuard hashes the handshake transcript with BLAKE2s.

Related terms