The Troika cryptanalysis competition
Troika is a cryptographic hash function operating on ternary messages for the use in IOTA’s distributed ledger technology. This page provides information on the rules, challenges and terms and conditions for the cryptanalysis competition.
The main goal of this competition is to encourage participants to practically break round-reduced versions of the Troika hash function. For this we consider both breaking the collision and preimage resistance of these variants of Troika. As a reward for breaking the challenges, the IOTA Foundation provided a total prize pool of 200.000 EUR.
The target for the challenges is always the Troika hash function as specified in the reference document. The only difference is the number of rounds, which is reduced for the challenges and ranges from 1 to 12.
For each round there are two challenges:
- Finding a collision on the 243-trit output.
- Finding a preimage for a given 243-trit image.
The solution has to be sent to “email@example.com” with the header “[Competition] Break Preimage/Collision X Rounds”.
The e-mail has to include the name of the authors, the colliding message pair respectively preimage in the correct format (see below) and a very brief summary on how the solution was obtained. You can also subscribe to this mailing list in order to get updates when new solution have been posted. The competition starts on December 20, 2018 and ends on December 31, 2019.
Details on the submission and challenges format:
The preimage targets are all given as a string of 81 trytes. Each tryte represents 3 trits and maps to a value between 0 and 26, which are encoded as 0,A,B,C,…,Z. Solutions for both the collision and preimage challenge have to be submitted in the same format. For example a submission for a preimage challenge should look like this:
[Competition] Break Preimage 4 Rounds Submitters: John Doe m: 00MW0JP0PC mlen: 30 H(m): PTCWT0MZMFTJ0ZPCZTZW0PWZCTJTJPFWTMJTTZFJ0PF0TMFTWZTTTZMMCMTTTMTJZFJJCJTJMPCTTMMZZ Summary: I used brute-force and got really lucky.
To ease the verification for participants we provide a tool to verify challenges. This tool can also be used to print the solution in the above format .
Below you can find the status on the preimage challenges.
* You can also find the challenges targets in plaintext here
Terms and Conditions
December 20, 2018.
The first correct solution submitted to the e-mail address “firstname.lastname@example.org” is rewarded with a price depending on which challenge was broken. All prices are given in EUR and are paid out in EUR or, if the winner prefers, the equivalent in MIOTA after the submission has been confirmed, approved, validated and verified by CYBERCRYPT.
No employees of CYBERCRYPT or IOTA or affiliated contractors or any third party with early access to the Troika document including close family members can participate in the challenge.
The information contained on the “www.cyber-crypt.com/troika” and “www.cyber-crypt.com/troika-challenge” websites is for information purposes only. CYBERCRYPT and IOTA Foundation assume no responsibility for errors or omissions in the contents on the website.
In no event shall CYBERCRYPT and IOTA Foundation be liable for any special, direct, indirect, consequential, or incidental damages or any damages whatsoever, whether in an action of contract, negligence or other torts, arising out of or in connection with the “Troika competition and challenge” or the contents of the website.
CYBERCRYPT and IOTA Foundation reserve the right to make additions, deletions, or modification to the terms, conditions and prizes at any time without prior notice.
Participants are forbidden to disclose information about the solution with other persons during the entire duration of the Troika challenge;
Each winning solution must be the result of a participant’s individual efforts and independent from any other individual, company, or third-party source, including fellow participants;
Prizes may be subject to government-imposed taxes and fees. Participant is responsible for any taxes imposed on the award and any required tax filings or other required paperwork associated with a prize.
All awarded prizes are final with no right to appeal.
CYBERCRYPT and IOTA Foundation reserve the right to refuse to award a prize without specifying reasons.
CYBERCRYPT and IOTA Foundation reserve the right to cancel the contest at any time without specifying reasons.
CYBERCRYPT and IOTA Foundation reserve the right to modify the prizes at any time; and
CYBERCRYPT and IOTA Foundation reserve the right to update these rules at any time and without notice.
Any dispute that may arise out of or from the contest sponsored by CYBERCRYPT or IOTA Foundation will be determined under the laws of Germany and participant expressly consents to the jurisdiction and venue of the courts in Germany.
TO THE EXTENT ALLOWED BY LAW, CYBERCRYPT OR IOTA FOUNDATION IS NOT LIABLE FOR ANY INDIRECT, SPECIAL, INCIDENTIAL, OR CONSEQUENTIAL DAMAGES REGARDLESS OF THE FORM OF ACTION OR THEORY OF RELIEF. TO THE EXTENT ALLOWED BY LAW, THE MAXIMUM LIABILITY FOR DIRECT DAMAGES UNDER THE EVENT SPONSORED AND ADMINISTERED BY CYBERCRYPT OR IOTA FOUNDATION IS LIMITED TO ZERO, REGARDLESS OF THE FORM OF ACTION OR THEORY OF RELIEF.