GOST Hash Generator
Turn any text into its 64-character GOST R 34.11-94 hash instantly.
How to use the GOST Hash Generator
- Type or paste your text in the box.
- Pick the parameter set from the dropdown — the two S-boxes give different hashes, so choose the one your system expects.
- The GOST hash appears as you type. Click Copy to grab the result.
About the GOST Hash Generator
GOST R 34.11-94 is the Russian federal standard hash function, and it produces 256 bits — 64 hexadecimal characters. "GOST" is the Russian standards designation, and the family it belongs to includes a matching block cipher and signature standard, all designed to interoperate. If you are working with Russian government systems, older Russian PKI, or software built to comply with that ecosystem, this is the hash you will meet.
The most important practical thing to know is the dropdown above. GOST's design leaves its S-boxes — the substitution tables at the heart of the function — as a parameter rather than fixing them in the specification. PHP therefore ships two: gost uses the test parameters published with the standard, while gost-crypto uses the CryptoPro S-box used in real Russian deployments. The two produce completely different hashes for the same input. This trips people up constantly — a hash that "does not match" is usually the wrong parameter set rather than a bug. The test parameters were never intended for production use; if you are matching against a real system, you almost certainly want CryptoPro.
On security: GOST R 34.11-94 has attracted published cryptanalysis over the years and has been superseded in Russia by the newer GOST R 34.11-2012 standard, commonly known as Streebog. Treat the 94 standard as a compatibility and legacy tool — the reason to compute it is that something else already expects it, not because it is a good choice for new work. For that, use SHA-256.
Frequently asked questions
Why do "gost" and "gost-crypto" give different hashes?
Because they use different S-boxes. The GOST standard leaves those substitution tables as a parameter: "gost" uses the test parameters published with the specification, while "gost-crypto" uses the CryptoPro S-box used in real deployments. Same input, same algorithm, different tables — different hash. This is expected, not a bug.
Which parameter set should I choose?
If you are matching a hash from a real Russian system or PKI, use the CryptoPro S-box. The test parameters were published for verifying implementations, not for production use.
Can I decrypt or reverse a GOST hash?
No. GOST is a one-way hash — the input is not stored inside the output, so there is nothing to decrypt or recover.
Why is my GOST hash always 64 characters?
GOST R 34.11-94 always outputs 256 bits, and each hex character represents 4 bits, so every hash is exactly 64 characters regardless of the input length.
Is my text sent anywhere?
Your text is sent to our server to be hashed, because browsers cannot compute GOST — they only expose the SHA family. It is hashed and immediately discarded, never logged and never stored.