frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Chopped, Stored, Secured – The Story of the Hash Function

https://0xkrt26.github.io/math_behind_security/2026/06/09/the-story-of-the-hash-function.html
15•denismenace•4d ago

Comments

tptacek•34m ago
The right way to understand modern general-purpose cryptographic hash functions (like SHA2) is just to understand block ciphers. A hash function is a block cipher's permutation core, wired to a "compression" function (much simpler than compression as typically understood; somewhat analogous to the chaining CBC does) that feeds blocks through the same permutation continuously, scrambling state as it goes.

Everything gets tweaked differently because you have different constraints and parameters for a hash function than for a block cipher (though: there were SHA3 contestants that used Rijndael/AES for the core permutation, which is attractive because it has broad hardware support), but the core doodads are basically the same.

(And of course, you can run this argument in reverse and derive a cipher from a hash function trivially. That's how Chapoly happened.)

thequux•25m ago
I can't judge the veracity of the history of hash functions, but the moment it starts talking about cryptography it goes completely off the rails: it seems to indicate that finite field exponentiation o'r high degree polynomials are used in cryptographic hash functions; they are emphatically not. It presents password hashing as just applying a suggest function to the password; in practice a KDF is used, which is a completely different design space (for a start, KDFs have a tweak parameter, usually called a salt in this context). Finally, there's a haven't reference to quantum computers breaking hash functions and needing post-quantum algorithms as a result. This does brush with reality in that Grover's algorithm does theoretically eat half the first preimage resistance security level of your hash function, but even SHA256 will require 2^128 iterations on a quantum computer, which will likely never be feasible. Worse, it doesn't help at all in attacks against second perimeter resistance or collision resistance.

Considering that everything I have personal knowledge of here is obviously bunk, best ignore the rest of it too

Your ePub Is Fine. Kobo Disagrees. Blame Adobe

https://andreklein.net/your-epub-is-fine-kobo-disagrees-blame-adobe/
107•sohkamyung•1h ago•37 comments

Show HN: Kage – Shadow any website to a single binary for offline viewing

https://github.com/tamnd/kage
384•tamnd•7h ago•89 comments

Write for One Person

https://wizardzines.com/comics/write-for-one-person/
25•evakhoury•2d ago•3 comments

Rio de Janeiro's "homegrown" LLM appears to be a merge of an existing model

https://github.com/nex-agi/Nex-N2/issues/4
267•unrvl22•9h ago•145 comments

Firewood Splitting Simulator

https://screen.toys/firewood/
612•memalign•4d ago•206 comments

Chaosnet (1981)

https://tumbleweed.nu/r/lm-3/uv/amber.html
58•RGBCube•5h ago•7 comments

Chopped, Stored, Secured – The Story of the Hash Function

https://0xkrt26.github.io/math_behind_security/2026/06/09/the-story-of-the-hash-function.html
15•denismenace•4d ago•2 comments

Show HN: Trace – Offline Mac meeting transcripts you can flag mid-call

https://traceapp.info
85•AG342•1d ago•31 comments

Ask HN: What are you working on? (June 2026)

149•david927•8h ago•542 comments

TorchCodec 0.14: HDR Video Decoding for CPU and CUDA, and Fast Wav Decoder

https://github.com/meta-pytorch/torchcodec/releases/tag/v0.14.0
17•scott_s•4d ago•2 comments

Segmented type appreciation corner (2018)

https://aresluna.org/segmented-type/
58•unexpectedVCR•3d ago•14 comments

Formal methods and the future of programming

https://blog.janestreet.com/formal-methods-at-jane-street-index/?from_theconsensus=1
182•eatonphil•12h ago•66 comments

AI is code – and can't be prompted into being smarter

https://www.theregister.com/ai-and-ml/2026/06/14/ai-is-code-and-cant-be-prompted-into-being-smart...
53•wglb•4h ago•31 comments

Caddy compatibility for zeroserve: 3x throughput and 70% lower latency

https://su3.io/posts/zeroserve-caddy-compat
153•losfair•11h ago•45 comments

Perlisisms (1982)

https://www.cs.yale.edu/homes/perlis-alan/quotes.html
91•tosh•9h ago•41 comments

The only scalable delete in Postgres is DROP TABLE

https://planetscale.com/blog/the-only-scalable-delete
122•hollylawly•3d ago•47 comments

FarOutCompany

https://faroutcompany.com/
98•bookofjoe•10h ago•16 comments

Show HN: Discover Wikipedia articles popular on Hacker News

https://www.orangecrumbs.com/
46•octopus143•6h ago•11 comments

The Birth and Death of JavaScript (2014)

https://www.destroyallsoftware.com/talks/the-birth-and-death-of-javascript
210•subset•12h ago•122 comments

Lisp's Influence on Ruby

https://blog.tacoda.dev/lisps-influence-on-ruby-6a54f1a7740e
216•tacoda•3d ago•55 comments

I indexed 669 GB of my GoPro videos using my M1 Max computer and local ML models

270•iliashad•9h ago•62 comments

USB Power Delivery: Plugging into the Benefits

https://www.aptiv.com/en/insights/article/usb-power-delivery-plugging-into-the-benefits
32•mooreds•3d ago•67 comments

How to earn a billion dollars

https://paulgraham.com/earn.html
433•kingstoned•12h ago•1315 comments

Stanford grads walk out on Google CEO Sundar Pichai speech

https://twitter.com/maattttbrown/status/2066215255987163246
79•sosomoxie•2h ago•36 comments

Not everyone is using AI for everything

https://gabrielweinberg.com/p/people-are-consuming-ai-like-they
415•yegg•10h ago•449 comments

Linux 7.1

https://lore.kernel.org/lkml/CAHk-=wi4BF4bMhZNZ1tqs+FFV4OuZRe3ZqdWB+LxRLmRweUzQw@mail.gmail.com/T/#u
222•berlianta•8h ago•82 comments

Abu Fanous

https://en.wikipedia.org/wiki/Abu_Fanous
58•joebig•3h ago•10 comments

The first game engine for robotics

https://luckyrobots.com/
28•arnejenssen•2d ago•19 comments

Inverse Rubric Optimization: A testbed for agent science

https://fulcrum.inc/2026/06/09/inverse-rubric-optimization.html
21•etherio•3d ago•0 comments

Did Anthropic ask for this?

https://www.verysane.ai/p/did-anthropic-ask-for-this
142•ad8e•2h ago•124 comments