UFOZoo

SM3 Hash Calculator — Chinese National Crypto Standard

China national cryptographic hash standard GM/T 0004-2012 with 256-bit output. Mandatory for government agencies, financial institutions, and public security.

Features

  • Compute SM3 hashes online — China's national cryptographic hash standard GM/T 0004-2012
  • Real-time 256-bit hash computation with 64 hex character output
  • One-click copy, save as .txt, and uppercase/lowercase toggle
  • Mandatory for Chinese government, banking, and public security systems
  • Hash verification against known SM3 checksums
  • 100% browser-based — all computation happens locally, zero data upload
  • Hash comparison — paste an expected 64-character SM3 hash alongside new output for instant match/mismatch verification
  • Real-time input length display — shows character and byte counts alongside the hash for development reference
  • Cross-platform browser access — compute SM3 hashes on any device without installing Guomi crypto libraries
  • Session history — retains previous SM3 results during the session for comparing multiple integrity checks

How to Use

  1. 1Type or paste your text into the input box above.
  2. 2Your hash digest appears instantly — no page reload needed.
  3. 3Toggle UPPERCASE / lowercase to change the hex output format.
  4. 4Click the copy icon to copy the hash to clipboard, or use Save to save as .txt.
  5. 5Paste an expected hash into the Verify field to check for a match.
  6. 6How to verify SM3 compliance for Chinese government systems: compute SM3 hash of your data and compare against the expected checksum required by GB/T 32905 or GM/T 0004 standards documentation.
  7. 7How to generate SM3 hashes for financial system integration: when integrating with Chinese banking systems, compute SM3 hashes of transaction data to meet the mandatory Guomi cryptography requirements.
  8. 8How to compare SM3 with SHA-256 output: input the same text in both tools. Both produce 64-character hashes, but the outputs differ completely due to different compression functions.
  9. 9How to verify SM3 in TLS 1.3 connections: RFC 8998 defines SM2/SM3/SM4 cipher suites. Use this tool to generate SM3 hashes for certificate verification in Guomi-compliant TLS configurations.
  10. 10How to test SM3 implementation correctness: input known SM3 test vectors (from GM/T 0004 standard) and verify the output matches the expected hash to confirm correct implementation.

Frequently Asked Questions

What is SM3?

SM3 is China's national cryptographic hash standard (GM/T 0004-2012), published by the Chinese State Cryptography Administration. It produces 256-bit hashes and is a core component of the Guomi cryptographic suite alongside SM2 (public key) and SM4 (block cipher). It is mandatory for all Chinese government and financial systems.

How does SM3 compare to SHA-256?

SM3 and SHA-256 both produce 256-bit hashes and use Merkle-Damgard construction, but SM3 uses a different compression function with more complex message expansion (132 words vs 64). SM3 is generally considered to have a larger security margin but runs slightly slower than SHA-256.

Why does China have its own hash standard?

Like Russia (GOST) and other nations, China developed its own cryptographic standards to ensure technological sovereignty, avoid dependency on foreign algorithms, and address specific national security requirements.

Is SM3 recognized internationally?

SM3 has been submitted to ISO/IEC for international standardization. It is also recognized in TLS 1.3 through RFC 8998, which defines SM2/SM3/SM4 cipher suites for TLS connections, enabling international interoperability with Chinese cryptographic standards.

Should I use SM3 if I am not in China?

You may need SM3 if your software must interoperate with Chinese government systems, Chinese financial institutions, or comply with Chinese cybersecurity laws. For general-purpose applications outside China, SHA-256 or SHA-3 are more appropriate.

How many hex characters does SM3 produce?

SM3 produces a 256-bit hash displayed as 64 hexadecimal characters — the same output length as SHA-256.

Is SM3 secure?

Yes. SM3 has undergone extensive cryptanalysis since its publication in 2010. No practical attacks have been found. It is considered to have a security margin comparable to or slightly larger than SHA-256.

What is the Guomi (国密) suite?

Guomi (国密) is China's national cryptographic standard suite, consisting of SM2 (elliptic curve public key algorithm), SM3 (cryptographic hash), SM4 (block cipher), SM9 (identity-based cryptography), and others. SM3 is the hashing component of this suite.

Where is SM3 used in practice?

SM3 is used in Chinese government document signing, electronic ID cards, banking transaction verification, VPNs (via RFC 8998 TLS cipher suites), blockchain projects in China, and any system subject to the Chinese Cryptography Law.

Is SM3 faster than SHA-256?

SM3 is slightly slower than SHA-256 in most implementations due to its more complex message expansion (132 expanded words vs 64). The difference is typically 10-20% in software implementations.

Does SM3 support HMAC?

Yes, HMAC-SM3 is defined and used in some Chinese cryptographic protocols. It follows the standard HMAC construction with SM3 as the underlying hash function.

What output sizes does SM3 support?

SM3 always produces exactly 256-bit (64 hex character) output. Unlike some modern hashes (BLAKE2, SHA-3), SM3 does not support variable-length or extendable output.

Related Tools