There are some cryptographically secure hash algorithms designed to be efficient for SNARKs, STARKs and FHE. Some of them already implemented in Zcash, Zokrates and circom. The ones that I know of are:
Is there any security and performance comparison available for these hash algorithms? (There have been attacks published on some other hash functions designed for SNARKs. But, I didn't manage to find a proper comparison for these ones.)
