The Tip5 Hash Function for Recursive STARKs

Alan Szepieniec; Alexander Lemmens; Jan Ferdinand Sauer; Bobbin Threadbare; Al-Kindi

Paper 2023/107 Original: eprint.iacr.org/2023/107 ↗

The Tip5 Hash Function for Recursive STARKs

Alan Szepieniec

Alexander Lemmens

Jan Ferdinand Sauer

Bobbin Threadbare

Al-Kindi

Abstract

This paper specifies a new arithmetization-oriented hash function called Tip5. It uses the SHARK design strategy with low-degree power maps in combination with lookup tables, and is tailored to the field with $p=2^{64}-2^{32}+1$ elements. The context motivating this design is the recursive verification of STARKs. This context imposes particular design constraints, and therefore the hash function's arithmetization is discussed at length.

Metadata

Available format(s): PDF
Category: Secret-key cryptography
Publication info: Preprint.
History: 2023-07-20: last updated; 2023-01-27: published
Short URL: https://ia.cr/2023/107
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2023/107,
      author = {Alan Szepieniec and Alexander Lemmens and Jan Ferdinand Sauer and Bobbin Threadbare and Al-Kindi},
      title = {The Tip5 Hash Function for Recursive STARKs},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/107},
      year = {2023},
      url = {https://eprint.iacr.org/2023/107}
}