<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: anabdellali</title>
    <description>The latest articles on DEV Community by anabdellali (@anabdellali_caea717f4fdce).</description>
    <link>https://dev.to/anabdellali_caea717f4fdce</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4172827%2Fa17fec94-84b9-4c81-a8a4-6afe21857962.jpg</url>
      <title>DEV Community: anabdellali</title>
      <link>https://dev.to/anabdellali_caea717f4fdce</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/anabdellali_caea717f4fdce"/>
    <language>en</language>
    <item>
      <title>SHA3-256 vs Keccak-256: the one-byte difference that breaks Ethereum hashes</title>
      <dc:creator>anabdellali</dc:creator>
      <pubDate>Fri, 09 Oct 2026 08:05:55 +0000</pubDate>
      <link>https://dev.to/anabdellali_caea717f4fdce/sha3-256-vs-keccak-256-the-one-byte-difference-that-breaks-ethereum-hashes-41i5</link>
      <guid>https://dev.to/anabdellali_caea717f4fdce/sha3-256-vs-keccak-256-the-one-byte-difference-that-breaks-ethereum-hashes-41i5</guid>
      <description>&lt;p&gt;If you've ever hashed something in Python with &lt;code&gt;hashlib.sha3_256&lt;/code&gt; and got a different result from Solidity's &lt;code&gt;keccak256&lt;/code&gt;, nothing is wrong with your code. You're using two different functions that share almost everything.&lt;/p&gt;

&lt;h2&gt;
  
  
  Same engine, different padding
&lt;/h2&gt;

&lt;p&gt;Keccak won NIST's hash competition in 2012. When NIST published the final standard, FIPS 202, in 2015, it changed the padding: SHA-3 appends the bits &lt;code&gt;01&lt;/code&gt; before the usual &lt;code&gt;10*1&lt;/code&gt; padding (so the first padding byte is &lt;code&gt;0x06&lt;/code&gt;), while the original Keccak used &lt;code&gt;0x01&lt;/code&gt;. Ethereum had already adopted Keccak, so it kept the original.&lt;/p&gt;

&lt;p&gt;One byte, completely different outputs:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Input&lt;/th&gt;
&lt;th&gt;Keccak-256 (Ethereum)&lt;/th&gt;
&lt;th&gt;SHA3-256 (NIST)&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;""&lt;/td&gt;
&lt;td&gt;&lt;code&gt;c5d24601...5d85a470&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;&lt;code&gt;a7ffc6f8...80f8434a&lt;/code&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;"abc"&lt;/td&gt;
&lt;td&gt;&lt;code&gt;4e03657a...a12d6c45&lt;/code&gt;&lt;/td&gt;
&lt;td&gt;&lt;code&gt;3a985da7...11431532&lt;/code&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;&lt;strong&gt;Quick check:&lt;/strong&gt; if your empty-string hash starts with &lt;code&gt;c5d24601&lt;/code&gt;, you have Keccak-256. If it starts with &lt;code&gt;a7ffc6f8&lt;/code&gt;, you have SHA3-256.&lt;/p&gt;

&lt;h2&gt;
  
  
  Getting the one you need
&lt;/h2&gt;



&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight python"&gt;&lt;code&gt;&lt;span class="kn"&gt;import&lt;/span&gt; &lt;span class="n"&gt;hashlib&lt;/span&gt;
&lt;span class="n"&gt;hashlib&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;sha3_256&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="sa"&gt;b&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;abc&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;).&lt;/span&gt;&lt;span class="nf"&gt;hexdigest&lt;/span&gt;&lt;span class="p"&gt;()&lt;/span&gt;      &lt;span class="c1"&gt;# NIST SHA3-256
&lt;/span&gt;
&lt;span class="kn"&gt;from&lt;/span&gt; &lt;span class="n"&gt;Crypto.Hash&lt;/span&gt; &lt;span class="kn"&gt;import&lt;/span&gt; &lt;span class="n"&gt;keccak&lt;/span&gt;            &lt;span class="c1"&gt;# pip install pycryptodome
&lt;/span&gt;&lt;span class="n"&gt;k&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="n"&gt;keccak&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;new&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;digest_bits&lt;/span&gt;&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="mi"&gt;256&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt; &lt;span class="n"&gt;k&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;update&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="sa"&gt;b&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="s"&gt;abc&lt;/span&gt;&lt;span class="sh"&gt;"&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt; &lt;span class="n"&gt;k&lt;/span&gt;&lt;span class="p"&gt;.&lt;/span&gt;&lt;span class="nf"&gt;hexdigest&lt;/span&gt;&lt;span class="p"&gt;()&lt;/span&gt;   &lt;span class="c1"&gt;# Ethereum
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;





&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight javascript"&gt;&lt;code&gt;&lt;span class="k"&gt;import&lt;/span&gt; &lt;span class="p"&gt;{&lt;/span&gt; &lt;span class="nx"&gt;createHash&lt;/span&gt; &lt;span class="p"&gt;}&lt;/span&gt; &lt;span class="k"&gt;from&lt;/span&gt; &lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;node:crypto&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt;
&lt;span class="nf"&gt;createHash&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;sha3-256&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;).&lt;/span&gt;&lt;span class="nf"&gt;update&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;abc&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;).&lt;/span&gt;&lt;span class="nf"&gt;digest&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;hex&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;);&lt;/span&gt;   &lt;span class="c1"&gt;// NIST SHA3-256&lt;/span&gt;

&lt;span class="k"&gt;import&lt;/span&gt; &lt;span class="p"&gt;{&lt;/span&gt; &lt;span class="nx"&gt;keccak256&lt;/span&gt;&lt;span class="p"&gt;,&lt;/span&gt; &lt;span class="nx"&gt;toUtf8Bytes&lt;/span&gt; &lt;span class="p"&gt;}&lt;/span&gt; &lt;span class="k"&gt;from&lt;/span&gt; &lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;ethers&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;;&lt;/span&gt;
&lt;span class="nf"&gt;keccak256&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="nf"&gt;toUtf8Bytes&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="s2"&gt;abc&lt;/span&gt;&lt;span class="dl"&gt;"&lt;/span&gt;&lt;span class="p"&gt;));&lt;/span&gt;                         &lt;span class="c1"&gt;// Ethereum&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Watch out for library names: Solidity's old &lt;code&gt;sha3()&lt;/code&gt; was an alias of &lt;code&gt;keccak256()&lt;/code&gt;, and some packages still say "sha3" when they mean Keccak.&lt;/p&gt;

&lt;h2&gt;
  
  
  Try it
&lt;/h2&gt;

&lt;p&gt;I put every variant side by side in a free in-browser tool: &lt;a href="https://sha3.si" rel="noopener noreferrer"&gt;sha3.si&lt;/a&gt;. Type &lt;code&gt;transfer(address,uint256)&lt;/code&gt; and the first 8 hex characters of Keccak-256 give you the ERC-20 selector, &lt;code&gt;a9059cbb&lt;/code&gt;. From the terminal: &lt;code&gt;npx sha3-check -s "transfer(address,uint256)" -a keccak-256&lt;/code&gt;.&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>security</category>
      <category>ethereum</category>
      <category>cryptography</category>
    </item>
  </channel>
</rss>
