Paper 2026/1377

HAWK ``Guessing Game'' is not Polynomial-Time

Markku-Juhani O. Saarinen, Tampere University
Abstract

We show that the runtime complexity of the attack described in \emph{``Cryptanalysis of HAWK: a Guessing Game''} is much higher than originally claimed by its authors, and the attack is unlikely to pose a threat to HAWK's security in its present form. The attack algorithm had not been implemented before this work; the polynomial-time running-time claim was based on four ``plausible heuristics''. Our experiments and implementation data point to a super-polynomial class-number obstruction, consistent with exponential-scale growth. The experiments also helped to identify faulty ``Heuristic 4'' as the source of the observed computational wall when scaling dimension $n$. The authors of Guessing Game have acknowledged our findings. To make the argument more universal, we also offer a machine-checked conditional reduction from explicit assumptions that shows the complexity to be at least super-polynomial. In terms of methodology, our work demonstrates the role of powerful AI tools in contemporary cryptanalysis -- the sudden feasibility of rapid exploration and trial implementation of advanced attack techniques. A public research artifact contains all source code and datasets to reproduce our results.

Metadata
Available format(s)
PDF
Category
Attacks and cryptanalysis
Publication info
Preprint.
Keywords
HAWKCryptanalysisGuessing Game
Contact author(s)
markku-juhani saarinen @ tuni fi
History
2026-07-06: approved
2026-07-05: received
See all versions
Short URL
https://ia.cr/2026/1377
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/1377,
      author = {Markku-Juhani O. Saarinen},
      title = {{HAWK} ``Guessing Game'' is not Polynomial-Time},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/1377},
      year = {2026},
      url = {https://eprint.iacr.org/2026/1377}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.