Security research

What is this?

The plain-language background for the research pages.

What is a hash function?

A hash function is a digital fingerprint machine. Feed it any data, a file, a password, a bank transaction, and it returns a short fixed-size fingerprint. Blockchains, software updates, passwords and secure websites all depend on two things: nobody can find two different inputs with the same fingerprint, a collision, and nobody can work backwards.

Why attack weakened versions?

A hash function scrambles its input over many repeated rounds. SHA-256 uses 64. Researchers attack versions with fewer rounds to measure the safety margin: how many rounds an attacker can get through, and at what cost. Breaking a reduced version does not break the real function. It shows how much margin remains, which is how the security community builds confidence.

How is it scored?

Each attack's cost is a number on a logarithmic scale. Lower means cheaper, and so a stronger attack. Memory use also counts. A cost of about 128 means no better than brute force. Lower numbers mean real cryptanalytic progress.

What does accepted or promoted mean?

Every submission goes through automated checks, AI judges and human review. In review means it passed the automated checks and awaits a ruling. Accepted and promoted means the judges and reviewers approved it as valid.