# Examples ## Algorithm Options Explained for HashCash - Extension Page: [Captcha - HashCash](/software/joomla/plugins/captcha-hashcash) ![HashCash CAPTCHA for Joomla: Algorithm Options Explained for Site Owners](https://cdn.richeyweb.com/images/articles/plg_captcha_hashcash/banner.webp) The [Captcha - HashCash](/software/joomla/plugins/captcha-hashcash) plugin (v5.6.3+) for Joomla provides six hashing algorithms to power its invisible proof-of-work (PoW) system. This privacy-focused tool blocks bots and spam on forms such as contact pages, registrations, and comments. It avoids visible puzzles or third-party trackers. The plugin runs computations in the user's browser using JavaScript and the Web Crypto API. Humans experience smooth interactions. Automated attacks face high costs. The system builds on Adam Back's 1997 HashCash idea, adapted for 2025 threats. It creates a unique challenge each time a form loads. The browser repeats hashes until the result meets the difficulty target, such as a set number of leading zero bits. The server checks the solution instantly on submission. Algorithms vary in speed, security, and resistance to GPU-based bots. This gives site owners flexible options. Difficulty settings range from 1 (light) to 4 (heavy). They increase the challenge for any algorithm. Begin with low difficulty and adjust based on spam levels. All algorithms require a secure context (HTTPS or localhost). They follow GDPR and e-Privacy rules by skipping cookies and data sharing. --- ## Core Comparison Table | Algorithm | Output Size | Security Focus | Relative Speed (User Device) | GPU Resistance | Best Use Case | |---|---|---|---|---|---| | **SHA-256** | 256 bits | Basic collision resistance | Fastest (~<1s at Diff 3) | Low | Everyday forms, high traffic | | **SHA-384** | 384 bits | Enhanced collision resistance | Fast (~1s at Diff 3) | Low | Moderate-risk sites | | **SHA-512** | 512 bits | Maximum raw hashing security | Moderate (~1.5s at Diff 3) | Low | High-value, low-traffic forms | | **PBKDF2** | Variable | Sequential iteration hardness | Slower (1-3s at Diff 3) | Medium | Botnet-targeted sites | | **PBKDF2+64KB Loop** | Variable | Memory-hard GPU deterrence | Slowest (2-4s at Diff 3) | High | Advanced threat environments | | **Argon2id** | 256 bits | Modern memory-hard function | Configurable (1-4s typical) | Very High | Maximum Security | \*Performance estimates apply to mid-range devices (for example, iPhone 14 or mid-tier Android). Test on your site. Use "delayed calculation" to start PoW only when users interact with the form. This reduces idle CPU use. --- ## Detailed Algorithm Breakdown ### 1. **SHA-256** - The Speed Leader for Wide Use **Technical Profile**: 256-bit digest. Offers ~2¹²⁸ collision resistance. Runs simple iterative hashing loops (1,024 to 65,536 attempts at Diff 1 to 4). **Utility & Value**: This default option suits owners who want smooth user experience. Desktops finish in microseconds. Mobile delays stay under 1 second. It fits high-traffic sites where bounce rates matter. Bots struggle at scale. GPU farms can parallelize it, however. **Pros for Owners**: - Works in all modern browsers. Adds no server load. - Simple setup. Use with Diff 2 for 90% spam drop and no user impact. **Cons**: Weak against parallel attacks. Low cost to attackers. While SHA-256 powers several modern proof-of-work CAPTCHAs (such as the open-source ALTCHA system), its highly parallelizable nature makes it vulnerable to acceleration on GPUs or cloud compute farms. Determined attackers can solve these challenges at minimal cost, reducing effectiveness against scaled or professional spam operations. **When to Choose**: Blogs, online shops, or forms with light spam (such as comments). --- ### 2. **SHA-384** - Balanced Step Up for Daily Security **Technical Profile**: 384-bit digest (truncated SHA-512). Delivers ~2¹⁹² resistance. Follows SHA-256 loop style but processes larger outputs for slight extra compute per hash. **Utility & Value**: It boosts protection while keeping speed. Ideal for sites with sensitive data like newsletters or inquiries. It raises brute-force costs for mid-level bots. Solve times stay under 1 second. Owners gain compliance points (for example, PCI-DSS) without user friction. **Pros for Owners**: - About 25% slower than SHA-256 but still quick. Server checks are fast. - Prepares for future attacks on shorter hashes. **Cons**: Remains open to GPU attacks. Offers no big jump over SHA-256 for simple threats. **When to Choose**: Registration or login forms. Or regulated fields (such as finance or health). --- ### 3. **SHA-512** - Powerhouse for Raw Strength **Technical Profile**: 512-bit digest. Provides ~2²⁵⁶ resistance. Requires more cycles per iteration due to size. Scales PoW with difficulty. **Utility & Value**: Owners battling credential stuffing or fake accounts benefit most. It forces bots into hours of work at Diff 4. Overkill for most sites. Excels in low-volume, high-stakes cases. Server verification takes one pass. **Pros for Owners**: - Top pure-hash security. Stops headless browser scripts. - Set it for admin forms without wide effects. **Cons**: 40-60% slower on budget devices (up to 2-3 second delays). GPUs can parallelize it. **When to Choose**: Internal tools, donation pages, or sites under attack. --- ### 4. **PBKDF2** - Chain Defense Against Scaled Bots **Technical Profile**: Chains HMAC-SHA-256 with set iterations (10,000+). Stresses time over raw hashing. Each step depends on the last, blocking parallelism. **Utility & Value**: It favors endurance over speed. Users solve in 1-3 seconds. GPU bots need minutes per form. Owners of spam-heavy sites (such as lead generation) value its ability to ruin bulk attacks. Difficulty tunes iterations for fine control. **Pros for Owners**: - Medium GPU resistance from chaining. Stays invisible and privacy-safe. - Works with "bot abuse detection" to trap suspects in endless loops. **Cons**: Adds visible (but acceptable) delays on old hardware. **When to Choose**: Forums, job boards, or sites with steady low-effort spam. --- ### 5. **PBKDF2+64KB Memory Loop** - The GPU Violator **Technical Profile**: Adds a 64KB memory buffer loop to PBKDF2 per iteration. Creates bandwidth and memory bottlenecks. GPU solve times reach 8-18 seconds. Users finish in 2-4 seconds. **Utility & Value**: This elite option counters 2025 botnets by turning attacker hardware strengths - particularly GPUs - into weaknesses. Unlike simpler SHA-256-based systems, which remain cost-effective for attackers to bypass at scale, the added memory-hard loop dramatically increases solve times on parallel hardware while keeping delays reasonable for legitimate users on standard devices. **Pros for Owners**: - Best resistance to parallel or farm attacks. Fits modern JS engines. - Supports layered security (for example, with Tor blocking). **Cons**: Highest user impact. Test well. Skip on mobile-first sites. **When to Choose**: E-commerce checkouts, premium signups, or intense bot battles. --- ## Tuning Tips: Algorithm + Difficulty Pairings | Security Goal | Recommended Combo | Expected Spam Reduction | |---|---|---| | **Basic Protection** | SHA-256 + Diff 2 | 70-80% | | **Standard Defense** | SHA-384 + Diff 3 | 85-90% | | **Advanced Bot Blocking** | SHA-512 + Diff 4 | 90-95% | | **GPU-Resistant** | PBKDF2 + Diff 3 / PBKDF2+64KB + Diff 2 | 92-97% | | **Maximum Deterrence** | Argon2id (default settings) | 96-99% | **Pro Advice**: Check Joomla logs. Raise difficulty first for easy gains. Then switch algorithms. Turn on "punish" for detected bots. No external services mean zero extra costs. --- ## Practical Configuration Examples ### **Standard Blog / Small Business Site** - **Algorithm**: SHA-256 - **Difficulty**: 2 - **Extras**: Delayed calc + DNS blacklist - **Why?**: Preserves fast loads. Handles comment spam with ease. ### **E-Commerce / Lead Gen Hub** - **Algorithm**: PBKDF2 - **Difficulty**: 3 - **Extras**: Tor block + abuse detection - **Why?**: Stops signup farms. Keeps real customers happy. ### **High-Security Enterprise** - **Algorithm**: PBKDF2+64KB Loop - **Difficulty**: 4 - **Extras**: All filters on - **Why?**: Builds a fortress. Accepts minor delays for safety. - [ email ](mailto:?subject=Algorithm+Options+Explained+for+HashCash&body=https%3A%2F%2Fwww.richeyweb.com%2Fsoftware%2Fexamples%2Fhashcash%2Falgorithm-options-explained-for-hashcash) - [ facebook ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.richeyweb.com%2Fsoftware%2Fexamples%2Fhashcash%2Falgorithm-options-explained-for-hashcash) - [ x-twitter ](https://twitter.com/intent/tweet?text=Algorithm+Options+Explained+for+HashCash%3A+https%3A%2F%2Fwww.richeyweb.com%2Fsoftware%2Fexamples%2Fhashcash%2Falgorithm-options-explained-for-hashcash) - [ linkedin ](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.richeyweb.com%2Fsoftware%2Fexamples%2Fhashcash%2Falgorithm-options-explained-for-hashcash&title=Algorithm+Options+Explained+for+HashCash&summary=The+Captcha+-+HashCash+plugin+%28v5.6.3%2B%29+for+Joomla...) - [ pinterest ](http://pinterest.com/pin/create/button/?url=https%3A%2F%2Fwww.richeyweb.com%2Fsoftware%2Fexamples%2Fhashcash%2Falgorithm-options-explained-for-hashcash&media=https%3A%2F%2Fcdn.joomla.org%2Fimages%2Fjoomla-org-og.jpg&description=Algorithm+Options+Explained+for+HashCash) [ Next article: Tracking Spam Bots Like a Pro with GA and HashCash Tracking Spam Bots Like a Pro with GA and HashCash ](/software/examples/hashcash/tracking-spam-bots-like-a-pro-with-ga-and-hashcash) ##### We Value Your Privacy We use cookies to enhance your experience and for traffic analysis. By continuing to visit this site you agree to our use of cookies. [Privacy Policy](/privacy-policy) Details ###### Google Tag Manager Items - Ad Storage - Ad User Data - Ad Personalization - Analytics Storage - Functionality Storage - Personalization Storage - Security Storage Decline Accept ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://www.richeyweb.com/#organization","name":"RicheyWeb","url":"https://www.richeyweb.com/","logo":{"@type":"ImageObject","url":"https://www.richeyweb.com/images/logo/richeyweb.svg","contentUrl":"https://www.richeyweb.com/images/logo/richeyweb.svg","width":{"@type":"QuantitativeValue","value":38,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":38,"unitCode":"PX"},"@id":"https://www.richeyweb.com/#logo"},"image":{"@id":"https://www.richeyweb.com/#logo"},"sameAs":["https://x.com/ComRicheyweb","https://www.facebook.com/RicheyWebDev/","https://www.youtube.com/channel/UCxnVG8BwOvQRO7hVqNX7T2g","https://community.joomla.org/service-providers-directory/listings/115:richeyweb.html"],"description":"RicheyWeb is a custom software developer specializing in Joomla extensions.","ContactPoint":[{"@type":"ContactPoint","url":"https://www.richeyweb.com/contact-us","telephone":"903-873-8460","contactType":"Owner/Administrator","areaServed":["United States",{"@type":"Country","name":"United States","sameAs":["https://en.wikipedia.org/wiki/United_States","https://www.wikidata.org/wiki/Q30","https://g.co/kg/m/09c7w0"]},"European Union",{"@type":"AdministrativeArea","name":"European Union","sameAs":["https://en.wikipedia.org/wiki/European_Union","https://www.wikidata.org/wiki/Q458","https://g.co/kg/m/0_6t_z8"]},"United Kingdom",{"@type":"Country","name":"United Kingdom","sameAs":["https://en.wikipedia.org/wiki/United_Kingdom","https://www.wikidata.org/wiki/Q145","https://g.co/kg/m/07ssc"]},"Australia",{"@type":"Country","name":"Australia","sameAs":["https://en.wikipedia.org/wiki/Australia","https://www.wikidata.org/wiki/Q408","https://g.co/kg/m/0chghy"]},"Canada",{"@type":"Country","name":"Canada","sameAs":["https://en.wikipedia.org/wiki/Canada","https://www.wikidata.org/wiki/Q16","https://g.co/kg/m/0d060g"]},"Russia",{"@type":"Country","name":"Russia","sameAs":["https://en.wikipedia.org/wiki/Russia","https://www.wikidata.org/wiki/Q159","https://g.co/kg/m/06bnz"]},"China",{"@type":"Country","name":"China","sameAs":["https://en.wikipedia.org/wiki/China","https://www.wikidata.org/wiki/Q148","https://g.co/kg/m/0d05w3"]}],"availableLanguage":"en"},{"@type":"ContactPoint","url":"https://www.richeyweb.com/bugs","telephone":"903-873-8460","contactType":"Technical Support","areaServed":["United States",{"@type":"Country","name":"United States","sameAs":["https://en.wikipedia.org/wiki/United_States","https://www.wikidata.org/wiki/Q30","https://g.co/kg/m/09c7w0"]},"European Union",{"@type":"AdministrativeArea","name":"European Union","sameAs":["https://en.wikipedia.org/wiki/European_Union","https://www.wikidata.org/wiki/Q458","https://g.co/kg/m/0_6t_z8"]},"United Kingdom",{"@type":"Country","name":"United Kingdom","sameAs":["https://en.wikipedia.org/wiki/United_Kingdom","https://www.wikidata.org/wiki/Q145","https://g.co/kg/m/07ssc"]},"Australia",{"@type":"Country","name":"Australia","sameAs":["https://en.wikipedia.org/wiki/Australia","https://www.wikidata.org/wiki/Q408","https://g.co/kg/m/0chghy"]},"Canada",{"@type":"Country","name":"Canada","sameAs":["https://en.wikipedia.org/wiki/Canada","https://www.wikidata.org/wiki/Q16","https://g.co/kg/m/0d060g"]},"Russia",{"@type":"Country","name":"Russia","sameAs":["https://en.wikipedia.org/wiki/Russia","https://www.wikidata.org/wiki/Q159","https://g.co/kg/m/06bnz"]},"China",{"@type":"Country","name":"China","sameAs":["https://en.wikipedia.org/wiki/China","https://www.wikidata.org/wiki/Q148","https://g.co/kg/m/0d05w3"]}],"availableLanguage":"en"}],"knowsAbout":["Computer programming",{"@type":"Thing","name":"Computer programming","sameAs":["https://en.wikipedia.org/wiki/Computer_programming","https://www.wikidata.org/wiki/Q80006","https://g.co/kg/m/01mf_"]},"PHP",{"@type":"Thing","name":"PHP","sameAs":["https://en.wikipedia.org/wiki/PHP","https://www.wikidata.org/wiki/Q59","https://g.co/kg/m/060kv"]},"JavaScript",{"@type":"Thing","name":"JavaScript","sameAs":["https://en.wikipedia.org/wiki/JavaScript","https://www.wikidata.org/wiki/Q2005","https://g.co/kg/m/02p97"]},"arduino","Computer forensics",{"@type":"Thing","name":"Computer forensics","sameAs":["https://en.wikipedia.org/wiki/Computer_forensics","https://www.wikidata.org/wiki/Q878553","https://g.co/kg/m/02wxbd"]},"White hat",{"@type":"Thing","name":"White hat","sameAs":["https://en.wikipedia.org/wiki/White_hat_(computer_security)","https://www.wikidata.org/wiki/Q7995625","https://g.co/kg/m/03ns_5"]},"Search engine optimization",{"@type":"Thing","name":"Search engine optimization","sameAs":["https://en.wikipedia.org/wiki/Search_engine_optimization","https://www.wikidata.org/wiki/Q180711","https://g.co/kg/m/019qb_"]},"Search engine marketing",{"@type":"Thing","name":"Search engine marketing","sameAs":["https://en.wikipedia.org/wiki/Search_engine_marketing","https://www.wikidata.org/wiki/Q846132","https://g.co/kg/m/06mw8r"]},"Digital marketing",{"@type":"Thing","name":"Digital marketing","sameAs":["https://en.wikipedia.org/wiki/Digital_marketing","https://www.wikidata.org/wiki/Q1323528","https://g.co/kg/g/122hcnps"]},"Web hosting service",{"@type":"Thing","name":"Web hosting service","sameAs":["https://en.wikipedia.org/wiki/Web_hosting_service","https://www.wikidata.org/wiki/Q5892272","https://g.co/kg/m/014pz4"]},"Email hosting service",{"@type":"Thing","name":"Email hosting service","sameAs":["https://en.wikipedia.org/wiki/Email_hosting_service","https://www.wikidata.org/wiki/Q5368818","https://g.co/kg/m/09w60m"]},"Internet hosting service",{"@type":"Thing","name":"Internet hosting service","sameAs":["https://en.wikipedia.org/wiki/Internet_hosting_service","https://www.wikidata.org/wiki/Q1210425","https://g.co/kg/m/09w5yw"]},"Virtual hosting",{"@type":"Thing","name":"Virtual hosting","sameAs":["https://en.wikipedia.org/wiki/Virtual_hosting","https://www.wikidata.org/wiki/Q588365","https://g.co/kg/m/024mvh"]},"Web performance",{"@type":"Thing","name":"Web performance","sameAs":["https://en.wikipedia.org/wiki/Web_performance","https://www.wikidata.org/wiki/Q7978612","https://g.co/kg/m/0gfj3f1"]},"Web content management system",{"@type":"Thing","name":"Web content management system","sameAs":["https://en.wikipedia.org/wiki/Web_content_management_system","https://www.wikidata.org/wiki/Q45211","https://g.co/kg/m/0615s2"]},"Content management system",{"@type":"Thing","name":"Content management system","sameAs":["https://en.wikipedia.org/wiki/Content_management_system","https://www.wikidata.org/wiki/Q131093","https://g.co/kg/m/0k23c"]},"General Data Protection Regulation",{"@type":"Thing","name":"General Data Protection Regulation","sameAs":["https://en.wikipedia.org/wiki/General_Data_Protection_Regulation","https://www.wikidata.org/wiki/Q1172506","https://g.co/kg/m/0pk_7xs"]},"SERP",{"@type":"Thing","name":"SERP","sameAs":["https://en.wikipedia.org/wiki/SERP","https://www.wikidata.org/wiki/Q2205811","https://g.co/kg/g/11c5szp7kc"]},"Artificial intelligence",{"@type":"Thing","name":"Artificial intelligence","sameAs":["https://en.wikipedia.org/wiki/Artificial_intelligence","https://www.wikidata.org/wiki/Q11660","https://g.co/kg/m/0mkz"]},"Prompt engineering",{"@type":"Thing","name":"Prompt engineering","sameAs":["https://en.wikipedia.org/wiki/Prompt_engineering","https://www.wikidata.org/wiki/Q108941486","https://g.co/kg/g/11p6kpgt_n"]},"E-learning",{"@type":"Thing","name":"E-learning","sameAs":["https://en.wikipedia.org/wiki/E-learning_(theory)","https://www.wikidata.org/wiki/Q182250","https://g.co/kg/g/122czm1f"]},"Sharable Content Object Reference Model",{"@type":"Thing","name":"Sharable Content Object Reference Model","sameAs":["https://en.wikipedia.org/wiki/Sharable_Content_Object_Reference_Model","https://www.wikidata.org/wiki/Q827811","https://g.co/kg/m/06_40"]},"Experience API",{"@type":"Thing","name":"Experience API","sameAs":["https://en.wikipedia.org/wiki/Experience_API","https://www.wikidata.org/wiki/Q7807728","https://g.co/kg/g/1yw9ktxr8"]},"Joomla",{"@type":"Thing","name":"Joomla","sameAs":["https://en.wikipedia.org/wiki/Joomla","https://www.wikidata.org/wiki/Q13167","https://g.co/kg/m/07qb81"]},"Nginx",{"@type":"Thing","name":"Nginx","sameAs":["https://en.wikipedia.org/wiki/Nginx","https://www.wikidata.org/wiki/Q306144","https://g.co/kg/m/02qft91"]},"MySQL",{"@type":"Thing","name":"MySQL","sameAs":["https://en.wikipedia.org/wiki/MySQL","https://www.wikidata.org/wiki/Q850","https://g.co/kg/m/04y3k"]}],"areaServed":["United States",{"@type":"Country","name":"United States","sameAs":["https://en.wikipedia.org/wiki/United_States","https://www.wikidata.org/wiki/Q30","https://g.co/kg/m/09c7w0"]},"European Union",{"@type":"AdministrativeArea","name":"European Union","sameAs":["https://en.wikipedia.org/wiki/European_Union","https://www.wikidata.org/wiki/Q458","https://g.co/kg/m/0_6t_z8"]},"United Kingdom",{"@type":"Country","name":"United Kingdom","sameAs":["https://en.wikipedia.org/wiki/United_Kingdom","https://www.wikidata.org/wiki/Q145","https://g.co/kg/m/07ssc"]},"Australia",{"@type":"Country","name":"Australia","sameAs":["https://en.wikipedia.org/wiki/Australia","https://www.wikidata.org/wiki/Q408","https://g.co/kg/m/0chghy"]},"Canada",{"@type":"Country","name":"Canada","sameAs":["https://en.wikipedia.org/wiki/Canada","https://www.wikidata.org/wiki/Q16","https://g.co/kg/m/0d060g"]},"Russia",{"@type":"Country","name":"Russia","sameAs":["https://en.wikipedia.org/wiki/Russia","https://www.wikidata.org/wiki/Q159","https://g.co/kg/m/06bnz"]},"China",{"@type":"Country","name":"China","sameAs":["https://en.wikipedia.org/wiki/China","https://www.wikidata.org/wiki/Q148","https://g.co/kg/m/0d05w3"]}],"memberOf":["Mensa International",{"@type":"Organization","name":"Mensa International","sameAs":["https://en.wikipedia.org/wiki/Mensa_International","https://www.wikidata.org/wiki/Q184194","https://g.co/kg/m/0140pf"]},"National Rifle Association",{"@type":"Organization","name":"National Rifle Association","sameAs":["https://en.wikipedia.org/wiki/National_Rifle_Association","https://www.wikidata.org/wiki/Q863259","https://g.co/kg/m/0j6f9"]},"CompTIA",{"@type":"Organization","name":"CompTIA","sameAs":["https://en.wikipedia.org/wiki/CompTIA","https://www.wikidata.org/wiki/Q597534","https://g.co/kg/m/040shq"]},"ISFCE LLC",{"@type":"Organization","name":"ISFCE LLC","sameAs":["https://isfce.com","https://g.co/kg/g/11wxm5r0rg"]}],"hasCredential":[{"@type":"EducationalOccupationalCredential","name":"Joomla 3 Certified Administrator","credentialCategory":"Certification","description":"Administrator Exam is the first available Joomla! certification exam","recognizedBy":{"@type":"Organization","name":"Open Source Matters, Inc.","sameAs":["https://en.wikipedia.org/wiki/Open_Source_Matters,_Inc.","https://g.co/kg/g/11f00wvjhz"]},"url":"https://certification.joomla.org/certified-user-directory/michael-richey","about":["Content management system",{"@type":"Thing","name":"Content management system","sameAs":["https://en.wikipedia.org/wiki/Content_management_system","https://www.wikidata.org/wiki/Q131093","https://g.co/kg/m/0k23c"]},"Web content management system",{"@type":"Thing","name":"Web content management system","sameAs":["https://en.wikipedia.org/wiki/Web_content_management_system","https://www.wikidata.org/wiki/Q45211","https://g.co/kg/m/0615s2"]},"Joomla",{"@type":"Thing","name":"Joomla","sameAs":["https://en.wikipedia.org/wiki/Joomla","https://www.wikidata.org/wiki/Q13167","https://g.co/kg/m/07qb81"]}],"educationalLevel":"expert","image":{"@type":"ImageObject","url":"https://www.richeyweb.com/images/contact/badge.webp","contentUrl":"https://www.richeyweb.com/images/contact/badge.webp","width":{"@type":"QuantitativeValue","value":300,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":86,"unitCode":"PX"},"caption":"Joomla 3 Certified Administrator"}},{"@type":"EducationalOccupationalCredential","name":"Certified Computer Examiner","credentialCategory":"Certification","description":"Internationally recognized computer forensics certifiecation","recognizedBy":{"@type":"Organization","name":"ISFCE LLC","sameAs":["https://en.wikipedia.org/wiki/ISFCE_LLC","https://g.co/kg/g/11wxm5r0rg"]},"url":"https://isfce.com/","about":["Digital forensics",{"@type":"Thing","name":"Digital forensics","sameAs":["https://en.wikipedia.org/wiki/Digital_forensics","https://www.wikidata.org/wiki/Q3246940","https://g.co/kg/m/0cnxzfx"]},"Computer forensics",{"@type":"Thing","name":"Computer forensics","sameAs":["https://en.wikipedia.org/wiki/Computer_forensics","https://www.wikidata.org/wiki/Q878553","https://g.co/kg/m/02wxbd"]},"Mobile device forensics",{"@type":"Thing","name":"Mobile device forensics","sameAs":["https://en.wikipedia.org/wiki/Mobile_device_forensics","https://www.wikidata.org/wiki/Q6887097","https://g.co/kg/m/06zp3tp"]},"Network forensics",{"@type":"Thing","name":"Network forensics","sameAs":["https://en.wikipedia.org/wiki/Network_forensics","https://www.wikidata.org/wiki/Q7001032","https://g.co/kg/m/05pb280"]},"Database forensics",{"@type":"Thing","name":"Database forensics","sameAs":["https://en.wikipedia.org/wiki/Database_forensics","https://www.wikidata.org/wiki/Q5227405","https://g.co/kg/m/0cgqsy"]}],"educationalLevel":"expert","image":{"@type":"ImageObject","url":"https://www.richeyweb.com/images/contact/isfce-cce.webp","contentUrl":"https://www.richeyweb.com/images/contact/isfce-cce.webp","width":{"@type":"QuantitativeValue","value":150,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":150,"unitCode":"PX"},"caption":"Certified Computer Examiner"}}],"hasOfferCatalog":{"@type":"OfferCatalog","name":"Web Services","itemListElement":[{"@type":"Offer","itemOffered":{"@type":"Service","name":"Hosting"}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"Development"}},{"@type":"Offer","itemOffered":{"@type":"Service","name":"Search Engine Optimization"}}]}},{"@type":"WebSite","@id":"https://www.richeyweb.com/#website","url":"https://www.richeyweb.com/","name":"RicheyWeb","publisher":{"@id":"https://www.richeyweb.com/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.richeyweb.com/search?q={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string","valueMaxLength":256,"valueMinLength":2,"valuePattern":"^[A-Za-z0-9\\s]+$"}},"creator":{"@id":"https://www.richeyweb.com/#organization"},"copyrightHolder":{"@id":"https://www.richeyweb.com/#organization"}},{"@type":"WebPage","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#webpage","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash","name":"Algorithm Options Explained for HashCash","description":"Protect your Joomla site from bots & spam with HashCash's flexible, invisible proof-of-work. Choose from 5 algorithms (SHA-256, SHA-384, SHA-512, PBKDF2, PBKDF2+64KB) for strong security and fast loads.","isPartOf":{"@id":"https://www.richeyweb.com/#website"},"about":{"@id":"https://www.richeyweb.com/#organization"},"inLanguage":"en-GB"},{"@type":"Article","image":{"@type":"ImageObject","url":"https://www.richeyweb.com/images/articles/plg_captcha_hashcash/banner.webp","contentUrl":"https://www.richeyweb.com/images/articles/plg_captcha_hashcash/banner.webp","width":{"@type":"QuantitativeValue","value":1312,"unitCode":"PX"},"height":{"@type":"QuantitativeValue","value":573,"unitCode":"PX"},"caption":"HashCash CAPTCHA for Joomla: Algorithm Options Explained for Site Owners","representativeOfPage":true},"headline":"Algorithm Options Explained for HashCash","description":"Protect your Joomla site from bots & spam with HashCash's flexible, invisible proof-of-work. Choose from 5 algorithms (SHA-256, SHA-384, SHA-512, PBKDF2, PBKDF2+64KB) for strong security and fast loads.","author":{"@type":"Person","name":"Michael Richey","url":"https://www.richeyweb.com/contact-us","@id":"https://www.richeyweb.com/contact-us#person"},"datePublished":"2025-10-28T00:00:00+00:00","dateModified":"2026-05-26T00:00:00+00:00","about":["Joomla",{"@type":"Thing","name":"Joomla","sameAs":["https://en.wikipedia.org/wiki/Joomla","https://www.wikidata.org/wiki/Q13167","https://g.co/kg/m/07qb81"]},"Cryptography",{"@type":"Thing","name":"Cryptography","sameAs":["https://en.wikipedia.org/wiki/Cryptography","https://www.wikidata.org/wiki/Q8789","https://g.co/kg/m/01ld0"]},"Proof of work",{"@type":"Thing","name":"Proof of work","sameAs":["https://en.wikipedia.org/wiki/Proof_of_work","https://www.wikidata.org/wiki/Q7249984","https://g.co/kg/m/05bdrw"]},"CAPTCHA",{"@type":"Thing","name":"CAPTCHA","sameAs":["https://en.wikipedia.org/wiki/CAPTCHA","https://www.wikidata.org/wiki/Q484598","https://grokipedia.com/page/CAPTCHA","https://g.co/kg/m/01hl4j"]},"Hashcash",{"@type":"Thing","name":"Hashcash","sameAs":["https://en.wikipedia.org/wiki/Hashcash","https://www.wikidata.org/wiki/Q357569","https://grokipedia.com/page/Hashcash","https://g.co/kg/m/02qsnf"]}],"mentions":["JavaScript",{"@type":"Thing","name":"JavaScript","sameAs":["https://en.wikipedia.org/wiki/JavaScript","https://www.wikidata.org/wiki/Q2005","https://g.co/kg/m/02p97"]},"Web Cryptography API",{"@type":"Thing","name":"Web Cryptography API","sameAs":["https://en.wikipedia.org/wiki/Web_Cryptography_API","https://www.wikidata.org/wiki/Q30688210","https://g.co/kg/g/11dy_ksq2m"]},"General Data Protection Regulation",{"@type":"Book","name":"General Data Protection Regulation","sameAs":["https://en.wikipedia.org/wiki/General_Data_Protection_Regulation","https://www.wikidata.org/wiki/Q1172506","https://g.co/kg/m/0pk_7xs"]},"HTTPS",{"@type":"Thing","name":"HTTPS","sameAs":["https://en.wikipedia.org/wiki/HTTPS","https://www.wikidata.org/wiki/Q44484","https://g.co/kg/m/03jkw"]},"Botnet",{"@type":"Thing","name":"Botnet","sameAs":["https://en.wikipedia.org/wiki/Botnet","https://www.wikidata.org/wiki/Q317671","https://g.co/kg/m/02z67z"]},"Secure Hash Algorithms",{"@type":"Thing","name":"Secure Hash Algorithms","sameAs":["https://en.wikipedia.org/wiki/Secure_Hash_Algorithms","https://www.wikidata.org/wiki/Q387688","https://g.co/kg/m/0vpn3kv"]},"Cryptography",{"@type":"Thing","name":"Cryptography","sameAs":["https://en.wikipedia.org/wiki/Cryptography","https://www.wikidata.org/wiki/Q8789","https://g.co/kg/m/01ld0"]},"PBKDF2",{"@type":"Thing","name":"PBKDF2","sameAs":["https://en.wikipedia.org/wiki/PBKDF2","https://www.wikidata.org/wiki/Q3952834","https://g.co/kg/m/05c24s"]}],"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#article","isPartOf":{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#webpage"},"publisher":{"@id":"https://www.richeyweb.com/#organization"},"keywords":"hashcash example","articleSection":"HashCash","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash","hasPart":[{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-core-comparison-table_2_1"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-detailed-algorithm-breakdown_2_2"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-1-sha-256-the-speed-leader-for-wide-use_3_3"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-2-sha-384-balanced-step-up-for-daily-security_3_4"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-3-sha-512-powerhouse-for-raw-strength_3_5"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-4-pbkdf2-chain-defense-against-scaled-bots_3_6"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-5-pbkdf2-64kb-memory-loop-the-gpu-violator_3_7"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-tuning-tips-algorithm-difficulty-pairings_2_8"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-practical-configuration-examples_2_9"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-standard-blog-small-business-site_3_10"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-e-commerce-lead-gen-hub_3_11"},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-high-security-enterprise_3_12"}]},{"@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex","@type":"ItemList","name":"Algorithm Options Explained for HashCash","numberOfItems":12,"itemListElement":[{"@type":"ListItem","position":1,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-core-comparison-table_2_1","name":"Core Comparison Table","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-core-comparison-table_2_1"}},{"@type":"ListItem","position":2,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-detailed-algorithm-breakdown_2_2","name":"Detailed Algorithm Breakdown","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-detailed-algorithm-breakdown_2_2"}},{"@type":"ListItem","position":3,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-1-sha-256-the-speed-leader-for-wide-use_3_3","name":"1. SHA-256 - The Speed Leader for Wide Use","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-1-sha-256-the-speed-leader-for-wide-use_3_3"}},{"@type":"ListItem","position":4,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-2-sha-384-balanced-step-up-for-daily-security_3_4","name":"2. SHA-384 - Balanced Step Up for Daily Security","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-2-sha-384-balanced-step-up-for-daily-security_3_4"}},{"@type":"ListItem","position":5,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-3-sha-512-powerhouse-for-raw-strength_3_5","name":"3. SHA-512 - Powerhouse for Raw Strength","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-3-sha-512-powerhouse-for-raw-strength_3_5"}},{"@type":"ListItem","position":6,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-4-pbkdf2-chain-defense-against-scaled-bots_3_6","name":"4. PBKDF2 - Chain Defense Against Scaled Bots","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-4-pbkdf2-chain-defense-against-scaled-bots_3_6"}},{"@type":"ListItem","position":7,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-5-pbkdf2-64kb-memory-loop-the-gpu-violator_3_7","name":"5. PBKDF2+64KB Memory Loop - The GPU Violator","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-5-pbkdf2-64kb-memory-loop-the-gpu-violator_3_7"}},{"@type":"ListItem","position":8,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-tuning-tips-algorithm-difficulty-pairings_2_8","name":"Tuning Tips: Algorithm + Difficulty Pairings","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-tuning-tips-algorithm-difficulty-pairings_2_8"}},{"@type":"ListItem","position":9,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-practical-configuration-examples_2_9","name":"Practical Configuration Examples","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-practical-configuration-examples_2_9"}},{"@type":"ListItem","position":10,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-standard-blog-small-business-site_3_10","name":"Standard Blog / Small Business Site","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-standard-blog-small-business-site_3_10"}},{"@type":"ListItem","position":11,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-e-commerce-lead-gen-hub_3_11","name":"E-Commerce / Lead Gen Hub","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-e-commerce-lead-gen-hub_3_11"}},{"@type":"ListItem","position":12,"item":{"@type":"WPHeader","@id":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#articleindex-toc-high-security-enterprise_3_12","name":"High-Security Enterprise","url":"https://www.richeyweb.com/software/examples/hashcash/algorithm-options-explained-for-hashcash#toc-high-security-enterprise_3_12"}}]}]} ```