3
$\begingroup$

Is it possible to have an output consisting purely of one character and does this change the entropy of that output? (If that's even possible to ascertain.)

As an example, the Bitcoin cryptocurrency is slowly and inadvertently compiling a list of inputs which produce outputs with successively larger numbers of trailing zeros in its blockchain. Will these ever be used to study the SHA-256 algorithm?

Improve this question
$\endgroup$
2
  • 2
    $\begingroup$ Entropy is defined for random variables. (The entropy of a constant random variable is 0.) $\endgroup$
    – Elias
    Aug 3, 2017 at 9:00
  • 4
    $\begingroup$ A preimage of $000\dots 0$ has no more meaning than a preimage of any other hash value. Even if someone knew such a preimage, it is wrong to assume that such a preimage would help "to study the sha256 algorithm". I am not entirely sure what you actually mean with that, the statement is very unspecific. There already is a lot of cryptanylsis for SHA-256. $\endgroup$
    – tylo
    Aug 3, 2017 at 10:31

1 Answer 1

Reset to default
13
$\begingroup$

If any filtering criterion on the output of SHA-256 (with its definition independent of SHA-256 internals) leaves $n$ possible values out of $2^{256}$, then as far as we know,

  • the best method to exhibit an input to SHA-256 matching that criterion involves trying distinct inputs;
  • the expected number of hashes (compressions) required for this is $2^{256}/n$;
  • the $n$ outputs are equiprobable, thus the entropy of the process generating SHA-256 hashes passing that criterion from random input is $\log_2(n)$ bit/output, or $n\log_2(n)2^{-256}$ bit/input.

An output consisting purely of one character is such a criterion, with $n=16$ if we read character as hexadecimal digit. It is expected that $2^{252}$ hashes would be necessary to achieve that. Based on blockchain statistics (currently $7\cdot10^{18}$ SHA-256d per second), I guestimate that less than $2^{95}$ SHA-256 hashes have been performed by mankind; thus, with overwhelming odds, nothing giving a hash passing said criteria was ever hashed. Our best estimate of the theoretical entropy rate of this process is $4$ bit/output, or $2^{-250}$ bit/input.

I do not see how the input values found by bitcoin mining could be of any use in the study of SHA-256.

Improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.