Pure Javascript implementation of the BLAKE2b and BLAKE2s hash functions
Latest commit 3f1e9b9 Jan 28, 2017 @dcposch 1.0.1



travis ci npm version

This is a pure Javascript implementation of the BLAKE2b and BLAKE2s hash functions.

BLAKE is the default family of hash functions in the venerable NaCl crypto library. Like SHA2 and SHA3 but unlike MD5 and SHA1, BLAKE offers solid security. With an optimized assembly implementation, BLAKE can be faster than all of those other hash functions.

RFC 7693: The BLAKE Cryptographic Hash and MAC

Of course, this implementation is in Javascript, so it won't be winning any speed records. More under Performance below. It's short and sweet, less than 500 LOC.

As far as I know, it's the only package available today to compute BLAKE2s and BLAKE2b in a browser.


var blake = require('blakejs')
// prints ba80a53f981c4d0d6a2797b69f12f6e94c212f14685ac4b74b12bb6fdbffa2d17d87c5392aab792dc252d5de4533cc9518d38aa8dbf1925ab92386edd4009923
// prints 508c5e8c327c14e2e1a72ba34eeb452f37458b209ed63a294d999b4c86675982


First, blake2b computes a BLAKE2b hash.

Pass it a string, Buffer, or Uint8Array containing bytes to hash, and it will return a Uint8Array containing the hash.

// Computes the BLAKE2B hash of a string or byte array, and returns a Uint8Array
// Returns a n-byte Uint8Array
// Parameters:
// - input - the input bytes, as a string, Buffer, or Uint8Array
//           Strings are converted to UTF8 bytes
// - key - optional key Uint8Array, up to 64 bytes
// - outlen - optional output length in bytes, default 64
function blake2b(input, key, outlen) {

For convenience, blake2bHex takes the same arguments and works the same way, but returns a hex string.

Second, you can use blake2bInit, blake2bUpdate, and blake2bFinall to compute the hash of a stream of bytes.

var KEY = null // optional key
var OUTPUT_LENGTH = 64 // bytes
var context = blake2bInit(OUTPUT_LENGTH, KEY)
// each time you get a byte array from the stream:
blake2bUpdate(context, bytes)
// finally, once the stream has been exhausted
var hash = blake2bFinal(context)
// returns a 64-byte hash, as a Uint8Array

Finally, all five of these functions (blake2b, blake2bHex, blake2bInit, blake2bUpdate, and blake2bFinal) have blake2s equivalents.

The inputs are identical except that maximum key size and maximum output size are 32 bytes instead of 64.


  • Can only handle up to 2**53 bytes of input

    If your webapp is hashing more than 8 petabytes, you may have other problems :)



BLAKE2b: 15.2 MB / second on a 2.2GHz i7-4770HQ
BLAKE2s: 20.4 MB / second


If you're using BLAKE2b in server side node.js code, you probably want the native wrapper which should be able to do several hundred MB / second on the same processor.

If you're using BLAKE2b in a web app, 15 MB/sec might be fine.

Javascript doesn't have 64-bit integers, and BLAKE2b is a 64-bit integer algorithm. Writing it withUint32Array is not that fast. BLAKE2s is a 32-bit algorithm, so it's a bit faster.

If we want better machine code at the expense of gross-looking Javascript, we could use asm.js


Creative Commons CC0. Ported from the reference C implementation in RFC 7693.