• About
  • FAQ
  • Earn Bitcoin while Surfing the net
  • Buy & Sell Crypto on Paxful
Newsletter
Approx Foundation
  • Home
    • Home – Layout 1
  • Bitcoin
  • Ethereum
  • Regulation
  • Market
  • Blockchain
  • Business
  • Guide
  • Contact Us
No Result
View All Result
  • Home
    • Home – Layout 1
  • Bitcoin
  • Ethereum
  • Regulation
  • Market
  • Blockchain
  • Business
  • Guide
  • Contact Us
No Result
View All Result
Approx Foundation
No Result
View All Result
Home Bitcoin

script – Does SHA-256d’s fixed second-hash padding create measurable internal structure beyond random oracle behavior?

Moussa by Moussa
April 27, 2026
in Bitcoin
0
How do Bitcoin mining pools typically handle payout frequency versus thresholds?
189
SHARES
1.5k
VIEWS
Share on FacebookShare on Twitter


Bitcoin security never depended on resistance to length-extension because preimages are public anyway, and common belief is that the double was used just for defense-in-depth.

I don’t think Bitcoin ever uses hashes in a way that would suffer from length extensions, but I guess Satoshi went with the safe choice of preventing it everywhere.

To avoid this property, Ferguson and Schneier suggested using SHA256d = SHA256(SHA256(x)) which avoids length-extension attacks. This construction has some minor weaknesses (not relevant to bitcoin), so I wouldn’t recommend it for new protocols, and would use HMAC with constant key, or truncated SHA512 instead.

https://bitcoin.stackexchange.com/a/8461/137501

Related articles

Elon Musk Says SpaceX Secured $40 Billion for AI Chips as Neocloud Risks Grow

Elon Musk Says SpaceX Secured $40 Billion for AI Chips as Neocloud Risks Grow

October 26, 2026
Sony-Backed Soneium Teams With K-Pop and Anime Creators to Tokenize IP

Sony-Backed Soneium Teams With K-Pop and Anime Creators to Tokenize IP

October 26, 2026

The paper’s discovery is interesting in that it moves SHA256d further away from a random oracle which has implications for secondary on-chain uses (e.g. in smart contracts or as 32-byte P2SH wrapper).

Interestingly, Bitcoin developers didn’t think that securing against length-extension matters so they went with plain SHA256 for SegWit P2WSH address hashes.

Later, Bitcoin Cash developers chose SHA256d for P2SH32, thus maintaining consistency with the rest of the protocol, and unlinkability between never-spent-from addresses.

This discovery you present somewhat weakens unlinkability property of SHA256d hashes. Readers might be interested in some older related work, that has already shown a weakness against an exotic use-case (Dodis et al., 2013):

We exhibit a cryptographic setting, called mutual proofs of work, in which the highlighted structure of H2 can be exploited. In mutual proofs of work, two parties prove to each other that they have computed some asserted amount of computational effort. This task is inspired by, and similar to, client puzzles [20, 21, 27, 28, 40] and puzzle auctions [42]. We give a protocol for mutual proofs of work whose computational task is computing hash chains. This protocol is secure when using a random oracle, but when using instead H2 an attacker can cheat by abusing the structural properties discussed above.



Source link

Share76Tweet47

Related Posts

Elon Musk Says SpaceX Secured $40 Billion for AI Chips as Neocloud Risks Grow

Elon Musk Says SpaceX Secured $40 Billion for AI Chips as Neocloud Risks Grow

by Moussa
October 26, 2026
0

Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure Elon Musk says SpaceX has secured $40...

Sony-Backed Soneium Teams With K-Pop and Anime Creators to Tokenize IP

Sony-Backed Soneium Teams With K-Pop and Anime Creators to Tokenize IP

by Moussa
October 26, 2026
0

Key TakeawaysOn Oct. 26, Soneium unveiled plans for native token SONEIUM to shift from infrastructure to an IP economy.The model...

USDC Rebates And Restricted Funding

USDC Rebates And Restricted Funding

by Moussa
October 26, 2026
0

Circle’s October 22 update on Match describes a service for connecting institutional USDC flows. A consequential detail sits in its...

A 10.8-Billion-Year-Old Radio Burst Is Pointing to a Surprising Home

A 10.8-Billion-Year-Old Radio Burst Is Pointing to a Surprising Home

by Moussa
October 26, 2026
0

Key TakeawaysSouth Africa’s MeerKAT array detected FRB 20240304B in March 2024. Its signal traveled 10.8 billion years, making it the...

Reflect Create Puts Branded Token Collateral In Focus

Reflect Create Puts Branded Token Collateral In Focus

by Moussa
October 26, 2026
0

Reflect’s Create launch, promoted by Solana on October 22, offers a fast route to issuing a branded yield-bearing token. The...

Load More

youssufi.com

sephina.com

[vc_row full_width="stretch_row" parallax="content-moving" vc_row_background="" background_repeat="no-repeat" background_position="center center" footer_scheme="dark" css=".vc_custom_1517813231908{padding-top: 60px !important;padding-bottom: 30px !important;background-color: #191818 !important;background-position: center;background-repeat: no-repeat !important;background-size: cover !important;}" footer_widget_title_color="#fcbf46" footer_button_bg="#fcb11e"][vc_column width="1/4"]

We bring you the latest in Crypto News

[/vc_column][vc_column width="1/4"][vc_wp_categories]
[/vc_column][vc_column width="1/4"][vc_wp_tagcloud taxonomy="post_tag"][/vc_column][vc_column width="1/4"]

Newsletter

[vc_raw_html]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[/vc_raw_html][/vc_column][/vc_row]
No Result
View All Result
  • Contact Us
  • Homepages
  • Business
  • Guide

© 2024 APPROX FOUNDATION - The Crypto Currency News