Direct Comparison Matrix
| Feature | HS256 | HS384 | HS512 |
| :--- | :--- | :--- | :--- |
| **Hash Algorithm** | SHA-256 | SHA-384 | SHA-512 |
| **Minimum Key Size** | 256 bits (32 B) | 384 bits (48 B) | 512 bits (64 B) |
| **Signature Size** | 32 bytes (43 Base64 chars) | 48 bytes (64 Base64 chars) | 64 bytes (86 Base64 chars) |
| **Quantum Collision Margin** | 128 bits | 192 bits | 256 bits |
| **Recommended For** | General Web & Mobile Apps | Enterprise & Compliance | Maximum Long-term Security |
Frequently Asked Questions
Which algorithm is best for mobile APIs?
HS256 is generally preferred for mobile APIs because its 43-character signature minimizes HTTP header overhead on cellular connections while providing formidable security.