macOS
brew install xxhashprovider-native install command
brew / rank 272
Extremely fast non-cryptographic hash algorithm. Version 0.8.3 via Homebrew; verified from local package data.
install
brew install xxhashprovider-native install command
overview
Extremely fast non-cryptographic hash algorithm
history
xxHash is Yann Collet's family of extremely fast, non-cryptographic hash algorithms and a reference C implementation with the xxhsum command-line tool. In package-manager terms it is both a developer library and a checksum utility for cases where speed, stable output, and good distribution properties matter more than cryptographic security.
The project was created by Yann Collet, also known for LZ4, around the need for hashes that could keep up with memory bandwidth. Its own documentation describes xxHash as processing at RAM-speed limits, portable across endianness, and producing identical results on all platforms.
The original family centered on XXH32 and XXH64, giving 32-bit and 64-bit outputs using ordinary integer arithmetic. Later releases added XXH3, a vectorized design with 64-bit and 128-bit variants that was introduced experimentally and stabilized in v0.8.0.
The command-line side grew alongside the library. xxhsum provides checksum generation and verification in the style of cksum or sha utilities, while symlinked helper names such as xxh32sum, xxh64sum, xxh3sum, and xxh128sum expose the algorithm choices as separate package binaries.
xxHash spread because it filled a very common systems niche: fast checksums for hash tables, content indexing, compression frames, databases, caches, backup tools, file-transfer workflows, and test suites where cryptographic hashes are unnecessary overhead.
The project's README emphasizes SMHasher and extended collision/speed testing, helping adoption by giving packagers and downstream developers a compact, portable C implementation with visible quality checks. The xxhash.com reference-usage page and language bindings further show adoption across multiple runtimes.
A notable ecosystem link is LZ4: xxHash is used as a checksum in the LZ4 frame format, reinforcing its identity as infrastructure for compression and high-throughput data plumbing.
Developers link libxxhash or include the single-file implementation to compute stable non-cryptographic hashes in performance-sensitive code. Typical use cases include deduplication hints, cache keys, integrity checks inside trusted pipelines, sharding, chunk fingerprints, and quick comparison of large byte streams.
CLI users run xxhsum or one of the algorithm-specific sum commands to generate and check hashes for files. The important operational caveat is that xxHash is not a cryptographic hash and should not be used for password storage, signatures, HMAC-style security decisions, or adversarial tamper resistance.
xxHash is the kind of small C library that quietly becomes plumbing. Package nerds care because it ships a stable ABI-facing library, pkg-config metadata, a family of checksum commands, and many downstream language bindings while still staying close to a reference implementation.
It also illustrates a packaging distinction users often miss: checksum tools are not automatically security tools. Installing xxhash gives a fast file-fingerprinting utility, not a replacement for SHA-256 or BLAKE2 in hostile environments.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
xxh128sum | executable | indexed executable | Discovered from the local executable index. |
xxh32sum | executable | indexed executable | Discovered from the local executable index. |
xxh3sum | executable | indexed executable | Discovered from the local executable index. |
xxh64sum | executable | indexed executable | Discovered from the local executable index. |
xxhsum | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:xxhash |
|---|---|
| Version | 0.8.3 |
| Package manager | Homebrew |
| Homepage | https://xxhash.com |
| Repository | https://github.com/Cyan4973/xxHash |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.