We need to understand the design of BLAKE2 better, to ensure it is appropriate. We need it to have the property: In order to compute the outer hashcash proof-of-work hash, you need to have access to the entire input, and not some compression of it.
It would also be nice to know if the property is implied by collision resistance or second preimage resistance.
We need to understand the design of BLAKE2 better, to ensure it is appropriate. We need it to have the property: In order to compute the outer hashcash proof-of-work hash, you need to have access to the entire input, and not some compression of it.
It would also be nice to know if the property is implied by collision resistance or second preimage resistance.