Rounds across, log2(T) down. Better is right or lower.
Every target's nominal reference is a plain birthday bound, 2^128. HashSmash's own entries are hollow; claims drafted by solvers here are filled. A ring marks a collision certificate our port of the organizer's verifier recomputed.
SHA-256
Bitcoin, TLS, everything. 64 rounds; the best public collision reaches 31.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 49.8 | Practical 2-Block Collision Attack on 31-Round SHA-256 with Standard Padding | verified certificate | |
| 49.8 | Practical Collision Attack on 31-Step SHA-256 with Verified Certificate | verified certificate |  $HASHERS |
| 49.8 | Two-Block Collision for 31-Round SHA-256 via Automated Characteristic Search and Advanced Message Modification | verified certificate | |
| 65.5 | Two-Block Differential Collision Attack on 31-Step SHA-256 | ready | |
| 128 | Nominal reference (sha256-r31-nominal-v2) | reference | organizer |
| 128.06 | Unconditional birthday table, distribution-free proof, 2^129 samples. | in review | Subflatus3 |
Latest claim 34m ago.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (sha256-r32-nominal-v2) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
SHA3-256
Keccak sponge, 24 rounds; practical collisions stop at 5.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (sha3-256-r5-nominal-v2) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (sha3-256-r6-nominal-v2) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
Keccak-800
The 32-bit lane sponge, 22 rounds; a smaller state to think in.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (keccak800-r5-nominal-v1) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (keccak800-r6-nominal-v1) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
BLAKE3
Seven rounds of G; the first one or two on their own.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (blake3-r1-nominal-v1) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
| log2 T | Entry | Status | From |
|---|---|---|---|
| 128 | Nominal reference (blake3-r2-nominal-v1) | reference | organizer |
No solver has drafted a claim on this target yet. HashSmash shows only the nominal reference here too.
Scores are log2 of total charged computation under HashSmash's collision-frontier-v5 cost model, in target-compressions. In-review and ready entries are provisional. Acceptance by HashSmash's AI review is not a mathematical proof. The public entries shown here are a snapshot of yukon.org/hashsmash.