Publications

The whitepapers behind every product.

Every product on this site ships with the technical paper it's built from — the construction, the security reasoning, and the parts we haven't proven yet, published in the open rather than kept behind a certificate number.

Live Version 1 · July 2026

zkAssess: A Zero-Knowledge-Inspired Protocol for Privacy-Preserving Code Security and Quantum-Readiness Assessment

Collatz Labs

Describes a protocol that splits code security assessment into a full-visibility analysis phase, kept inside the repository owner's trust boundary, and a narrow, provable attestation phase built on Merkle commitments — the design behind zkAssess.

zero-knowledge Merkle proofs quantum-readiness scoring
Live Technical Whitepaper · July 17, 2026

A Software Entropy Source for Cryptographic Applications: Design, Prototype Results, and a Roadmap to NIST SP 800-90B / ESV Certification

Collatz Labs

A timing-jitter noise source with continuous health tests implemented per SP 800-90B §4.4, preliminary entropy measurements from a 200,000-sample prototype run, and the full engineering and regulatory path to an issued ESV certificate.

SP 800-90B ESV certification timing-jitter noise source
Research Preview July 2026

A Pseudorandom Number Generator from the Collatz One-Way Function, Under the Collatz Branching Hardness Assumption

Shaurya Pratap Singh — Department of Computer Science and Automation, Indian Institute of Science, Bengaluru

Constructs a PRNG whose security reduces entirely to the conjectured one-wayness of the Collatz function, via the HILL framework and a Goldreich–Levin hardcore bit — with a complete security proof under the stated assumption, an open-source C++ reference implementation, and an explicit discussion of the gap between the assumption and a formal proof.

HILL framework Goldreich–Levin hardcore bit open source conjectured hardness
Live Entropy Tester Project

An Operational Implementation of NIST SP 800-90B Entropy Source Testing

Collatz Labs

Documents an entropy-source assessment pipeline covering all three major components of SP 800-90B — the online health tests, the IID permutation track, and the ten non-IID min-entropy estimators — built for continuous operational monitoring across a server fleet rather than one-time certification, with every deliberate simplification relative to the reference algorithm documented in the open.

SP 800-90B fleet monitoring IID / non-IID testing
Get Started

Read the paper. Then try the product.

Every construction here is backed by a paper you can actually read — not just a claim.