What is BLAKE3?

BLAKE3 is a cryptographic hash function that has revolutionized the world of digital security. Created by a team of cryptography experts, this function offers unprecedented performance, combining speed and security. In this article, we will explore in detail what BLAKE3 is, how it works, and why it is so important in today's cryptographic technology landscape.

Origin and development of BLAKE3

BLAKE3 is the result of a joint effort by Jack O'Connor, Jean-Philippe Aumasson, Samuel Neves, and Zooko Wilcox-O'Hearn. It was officially announced on January 9, 2020 at the Real World Crypto conference, an event that brings together cryptography experts to discuss the latest innovations in the field.

The BLAKE3 function is an evolution of BLAKE2, which is an improved version of BLAKE, the original algorithm that started this family of hashes. However, unlike its predecessors, which are algorithms with multiple variants, BLAKE3 is a single algorithm with a number of advanced features.

These features include parallelism, the ability to operate as an extensible output function (XOF), a key derivation function (KDF, essential to improve the security foundation of the algorithm), a pseudorandom function (PRF), and a message authentication code (MAC, which allows ensuring the authenticity of messages).

Key Features of BLAKE3

But beyond all these advances, BLAKE3 offers some interesting advances such as:

Parallelism and Performance

One of the most notable aspects of BLAKE3 is its ability to leverage parallelism. The function uses a binary tree structure, allowing for a virtually unlimited degree of parallelism, both at the SIMD (Single Instruction, Multiple Data) and multithreading levels. This means that BLAKE3 can process large amounts of data simultaneously, resulting in significantly higher performance than other hash algorithms.

In fact, official BLAKE3 implementations in languages ​​like Rust and C/C++ are dually licensed as public domain (CC0) and under the Apache license. This facilitates its adoption in a wide range of applications, from open source software to enterprise solutions.

Speed ​​and Efficiency

BLAKE3 is designed to be as fast as possible. In tests performed on an Intel Cascade Lake-SP processor, BLAKE3 was shown to be approximately five times faster than BLAKE2 and fifteen times faster than SHA3-256. These results are impressive and reflect the innovative approach of the BLAKE3 developers to performance optimization.

BLAKE3's compression feature is based on that of BLAKE2, but with a reduction in the number of rounds from 10 to 7. This reduction is based on the premise that current cryptography is too conservative and that significant performance savings can be achieved without compromising security.

In fact, the development team has made public a speed test executed on Amazon Web Services (AWS), which makes the superiority of BLAKE3 very clear:

Security and Robustness

Despite its focus on speed, BLAKE3 does not sacrifice security. The developers claim that BLAKE3 is 128-bit secure for all of its security targets, including preimage, collision, and differentiability attacks. This means that BLAKE3 is as secure as SHA3-256 and other hash algorithms that also have a 128-bit security level.

However, the use of only seven rounds instead of BLAKE2's ten has raised some concerns in the crypto community. Some experts argue that this reduction could make BLAKE3 more vulnerable to future attacks that have not yet been considered in current cryptographic analysis. Nonetheless, BLAKE3's developers have published an extensive security analysis that supports their claims of robustness.

Use cases in the industry

BLAKE3 is already being adopted in various industrial applications. For example, the Linux kernel (as of version 5.17) uses BLAKE2 in its cryptographic pseudo-random number generator. In addition, the WireGuard protocol (a virtual private network or VPN protocol), known for its security and performance, uses BLAKE2 for hashing and keyed hashing.

On the other hand, companies like Dropbox (centralized cloud storage) and Syncthing (data storage and sharing using P2P networks) use BLAKE3 in order to create hashes that allow them to identify documents within their data warehouse, while also allowing them to create delta files, in order to improve synchronization speed and reduce the bandwidth used.

Another use of BLAKE3 can be seen in file systems such as ZFS (since OpenZFS 2.2) or BTRFS (since kernel 5.17), which use BLAKE3 to improve data integrity and security, while also improving the performance of these systems because BLAKE3 is much faster than other existing options.

In the blockchain world, networks such as Zcash, Cardano and Solana make active use of BLAKE3 for different tasks. From the generation of hashes for the verification and identification of transactions, through the use of identification in smart contracts and also at the level of the security of the nodes that maintain these networks.

Conclusion

BLAKE3 is a cryptographic hash function that represents a significant leap forward in terms of performance and efficiency. Its innovative design, combined with a strong security foundation, makes it an attractive choice for a wide range of applications, from blockchain technologies to pseudo-random number generation. As BLAKE3 adoption continues to grow, we are likely to see further innovations and improvements in the field of cryptography and digital security.

In short, BLAKE3 is a hash function that is not only fast and secure, but also offers a number of advanced features that make it a versatile and reliable choice for developers and security professionals.