What's cch? Reverse Engineering Claude Code's Request Signing

2026-04-02

Anthropic's Claude Code client uses a "cch" hash for request signing, which researchers discovered is an xxHash64 of the request body computed within a custom native Bun runtime. This mechanism serves as a non-cryptographic attribution and metering tool to make sure requests originate from official clients rather than acting as a security boundary.