On the Structural Impossibility of Hash Collision Finding\\ via Direct SAT Duplication Why Encoding $H(x_1) = H(x_2) \wedge x_1 \neq x_2$ as a Duplicated SAT Circuit is Inherently Unsatisfiable
Authors/Creators
Description
We present a fundamental structural observation regarding the encoding of hash function collision search as a Boolean Satisfiability (SAT) problem. The standard approach to finding collisions $H(x_1) = H(x_2)$ with $x_1 \neq x_2$ requires instantiating two copies of the hash circuit and constraining their outputs to be equal. We demonstrate that this ``duplication approach'' produces formulas that are inherently unsatisfiable due to deep structural reasons rooted in the interaction between circuit determinism, the pigeonhole principle at the clause level, and the symmetry-breaking effect of the inequality constraint. We argue that this unsatisfiability is not merely a consequence of hash function strength but rather an intrinsic property of the encoding itself, rendering the SAT-based collision search approach fundamentally misconceived. Even differential cryptanalysis paths, when fully encoded, collapse into the same structural trap. This observation has significant implications for understanding why decades of SAT-based cryptanalysis have produced limited results on collision finding for standard hash functions.
Files
On_the_Structural_Impossibility_of_Hash_Collision_Finding_via_Direct_SAT_Duplication.pdf
Files
(545.8 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:9a63a66d219a46473dd83c5746850960
|
43.3 kB | Download |
|
md5:a15eb805a70615d4c9d393b0c6f34b5a
|
502.5 kB | Preview Download |