SHA-384
SHA-384 is the 384-bit truncated variant of the SHA-2 family, using the same round function as SHA-512 but different initial values, outputting a 48-byte digest.
Purpose
Provides high collision resistance where a 384-bit security level is needed, e.g. ECDSA P-384 signatures and TLS.
Mechanism
Structurally identical to SHA-512 (80 rounds, 64-bit words); the initial value is taken from a SHA-512 intermediate value, and the output is truncated to the high 384 bits.
Use cases
- ECDSA P-384 signatures
- TLS 1.3 certificate signatures
- High-security digests