SHA-4 Initiative

Toward a standard for arithmetization-oriented hash functions.

The gap

The current NIST hash standards, SHA-2 and SHA-3, were designed for general-purpose computing and rely heavily on bitwise operations that do not translate efficiently into arithmetic circuits. Zero-knowledge proof systems, verifiable computation, and the infrastructure supporting post-quantum migration increasingly depend on hash functions that can be evaluated cheaply inside such circuits. In STARK settings, there exisits a substantial performance gap between a conventional hash and an arithmetization-oriented alternative. No standardised circuit-friendly hash function currently exists.

What this is

This is a community effort to explore whether a standardised arithmetization-oriented hash function is needed and what a process to evaluate candidates might look like. The work is intended to be open and deliberative, drawing on input from cryptographers, standards bodies, and practitioners building systems that rely on circuit-efficient hashing. It is not advocacy for any specific candidate construction.

Status

We are drafting an initial discussion note outlining the standards gap and the considerations that would inform a candidate evaluation process.

People

Resources

References

Contact

TBC