
This paper demonstrates a method to deterministically reverse the first eight rounds (iterations) of the SHA-256 compression function. By tracking the propagation of a single message schedule word through the internal state and expressing its effect algebraically across rounds, we isolate and recover its original value from the final state. The results indicate that for eight rounds of SHA-256, the function remains fully invertible, with each round preserving enough structural information to reconstruct the original input. When reduced to eight rounds, SHA-256 no longer satisfies the criteria of a one-way function, but instead exhibits behavior more akin to a reversible transformation. The reversibility framework introduced here may also extend to SHA-512.
cryptography, reduced-round, cryptanalysis, SHA-256, hash function, SHA-2
cryptography, reduced-round, cryptanalysis, SHA-256, hash function, SHA-2
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 0 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Average | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Average | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Average |
