Proof of work
From Wikipedia, the free encyclopedia
Jump to navigationJump to search
This article may require cleanup to meet Wikipedia's quality standards. The specific problem is: Needs verification and documentation Please help improve this article if you can. (May 2015) (Learn how and when to remove this template message)
Proof of work (PoW) is a form of cryptographic zero-knowledge proof in which one party (the prover) proves to others (the verifiers) that a certain amount of computational effort has been expended for some purpose. Verifiers can subsequently confirm this expenditure with minimal effort on their part. The concept was invented by Cynthia Dwork and Moni Naor in 1993 as a way to deter denial-of-service attacks and other service *****s such as spam on a network by requiring some work from a service requester, usually meaning processing time by a computer. The term "proof of work" was first coined and formalized in a 1999 paper by Markus Jakobsson and Ari Juels. Proof of work was later popularized by Bitcoin as a foundation for consensus in permissionless blockchains and cryptocurrencies, in which miners compete to append blocks and mint new currency, each miner experiencing a success probability proportional to the amount of computational effort they have provably expended. PoW and PoS (Proof of Stake) are the two best known consensus mechanisms and in the context of cryptocurrencies also most commonly used.
A key feature of proof-of-work schemes is their asymmetry: the work must be moderately hard (yet feasible) on the prover or requester side but easy to check for the verifier or service provider. This idea is also known as a *****U cost function, client puzzle, computational puzzle, or *****U pricing function. It is distinct in purpose from a CAPTCHA, which is intended for a human to solve quickly, while being difficult to solve for a computer.
Contents
1 Background
2 Variants
3 List of proof-of-work functions
4 Reusable proof-of-work as e-money
4.1 Bitcoin-type proof of work
4.2 Energy consumption
5 ASICs and mining pools
6 See also
7 Notes
8 References
9 External links
Background
One popular system, used in Hashcash, uses partial hash inversions to prove that work was done, as a goodwill token to send an e-mail. For instance, the following header represents about 252 hash computations to send a message to [email protected] on January 19, 2038:
X-Hashcash: 1:52:380119:[email protected]:::9B760005E92F0DAE
It is verified with a single computation by checking that the SHA-1 hash of the stamp (omit the header name X-Hashcash: including the colon and any amount of whitespace following it up to the digit '1') begins with 52 binary zeros, that is 13 hexadecimal zeros:
0000000000000756af69e2ffbdb930261873cd71
Whether PoW systems can actually solve a particular denial-of-service issue such as the spam problem is subject to debate; the system must make sending spam emails obtrusively unproductive for the spammer, but should also not prevent legitimate users from sending their messages. In other words, a genuine user should not encounter any difficulties when sending an email, but an email spammer would have to expend a considerable amount of computing power to send out many emails at once. Proof-of-work systems are being used as a primitive by other more complex cryptographic systems such as bitcoin which uses a system similar to Hashcash.
Variants
There are two classes of proof-of-work protocols.
Challenge–response protocols assume a direct interactive link between the requester (client) and the provider (server). The provider chooses a challenge, say an item in a set with a property, the requester finds the relevant response in the set, which is sent back and checked by the provider. As the challenge is chosen on the spot by the provider, its difficulty can be adapted to its current load. The work on the requester side may be bounded if the challenge-response protocol has a known solution (chosen by the provider), or is known to exist within a bounded search space.
Proof of Work challenge response.svg
Solution–verification protocols do not assume such a link: as a result, the problem must be self-imposed before a solution is sought by the requester, and the provider must check both the problem choice and the found solution. Most such schemes are unbounded probabilistic iterative procedures such as Hashcash.
Proof of Work solution verification.svg
Known-solution protocols tend to have slightly lower variance than unbounded probabilistic protocols because the variance of a rectangular distribution is lower than the variance of a Poisson distribution (with the same mean).[further explanation needed] A generic technique for reducing variance is to use multiple independent sub-challenges, as the average of multiple samples will have a lower variance.
There are also fixed-cost functions such as the time-lock puzzle.
Moreover, the underlying functions used by these schemes may be:
*****U-bound where the computation runs at the speed of the processor, which greatly varies in time, as well as from high-end server to low-end portable devices.
Memory-bound where the computation speed is bound by main memory accesses (either latency or bandwidth), the performance of which is expected to be less sensitive to hardware evolution.
Network-bound if the client must perform few computations, but must collect some tokens from remote servers before querying the final service provider. In this sense, the work is not actually performed by the requester, but it incurs delays anyway because of the latency to get the required tokens.
Finally, some PoW systems offer shortcut computations that allow participants who know a secret, typically a private key, to generate cheap PoWs. The rationale is that mailing-list holders may generate stamps for every recipient without incurring a high cost. Whether such a feature is desirable depends on the usage scenario.
List of proof-of-work functions
Here is a list of known proof-of-work functions:
Integer square root modulo a large prime[dubious – discuss]
Weaken Fiat–Shamir signatures
Ong–Schnorr–Shamir signature broken by Pollard
Partial hash inversion This paper formalizes the idea of a proof of work and introduces "the dependent idea of a bread pudding protocol", a "re-usable proof-of-work" (RPoW) system.
Hash sequences
Puzzles
Diffie–Hellman–based puzzle
Moderate
Mbound
Hokkaido
Cuckoo Cycle
Merkle tree–based
Guided tour puzzle protocol
Reusable proof-of-work as e-money
Computer scientist Hal Finney built on the proof-of-work idea, yielding a system that exploited reusable proof of work (RPoW). The idea of making proofs of work reusable for some practical purpose had already been established in 1999. Finney's purpose for RPoW was as token money. Just as a gold coin's value is thought to be underpinned by the value of the raw gold needed to make it, the value of an RPoW token is guaranteed by the value of the real-world resources required to 'mint' a PoW token. In Finney's version of RPoW, the PoW token is a piece of Hashcash.
A website can demand a PoW token in exchange for service. Requiring a PoW token from users would inhibit frivolous or excessive use of the service, sparing the service's underlying resources, such as bandwidth to the Internet, computation, disk space, electricity, and administrative overhead.
Finney's RPoW system differed from a PoW system in permitting the random exchange of tokens without repeating the work required to generate them. After someone had "spent" a PoW token at a website, the website's operator could exchange that "spent" PoW token for a new, unspent RPoW token, which could then be spent at some third-party website similarly equipped to accept RPoW tokens. This would save the resources otherwise needed to 'mint' a PoW token. The anti-counterfeit property of the RPoW token was guaranteed by remote attestation. The RPoW server that exchanges a used PoW or RPoW token for a new one of equal value uses remote attestation to allow any interested party to verify what software is running on the RPoW server. Since the source code for Finney's RPoW software was published (under a BSD-like license), any sufficiently knowledgeable programmer could, by inspecting the code, verify that the software (and, by extension, the RPoW server) never issued a new token except in exchange for a spent token of equal value.
Until 2009, Finney's system was the only RPoW system to have been implemented; it never saw economically significant use.
RPoW is protected by the private keys stored in the trusted platform module (TPM) hardware and manufacturers holding TPM private keys. Stealing a TPM manufacturer's key or obtaining the key by examining the TPM chip itself would subvert that assurance.
Bitcoin-type proof of work
In 2009, the Bitcoin network went online. Bitcoin is a proof-of-work cryptocurrency that, like Finney's RPoW, is also based on the Hashcash PoW. But in Bitcoin, double-spend protection is provided by a decentralized P2P protocol for tracking transfers of coins, rather than the hardware trusted computing function used by RPoW. Bitcoin has better trustworthiness because it is protected by computation. Bitcoins are "mined" using the Hashcash proof-of-work function by individual miners and verified by the decentralized nodes in the P2P bitcoin network.
The difficulty is periodically adjusted to keep the block time around a target time.
Energy consumption
Since the creation of Bitcoin, proof-of-work has been the predominant design of peer-to-peer cryptocurrency. Many studies have been looking at the energy consumption of mining. The PoW mechanism requires a vast amount of computing resources, which consume a significant amount of electricity. Bitcoin's energy consumption can power an entire country.
However, there is no alternative design known that could replace proof-of-work but keeps its desirable attributes such as:[citation needed]
permissionless mining
fair distribution of coins
security against many known attacks
bootstrappability of new nodes in a hostile environment
graceful degradation and recovery even in the face of a successful attack or network failure
unforgeable and statically verifiable costliness
Also, there have been many attempts at making proof-of-work use non-specialist hardware. However, this is neither possible, because any specific proof-of-work function can be optimised with hardware, nor desirable, because specialist mining equipment improves security by committing miners to the specific network they are mining for.[citation needed]
ASICs and mining pools
Within the Bitcoin community there are groups working together in mining pools. Some miners use application-specific integrated circuits (ASICs) for PoW. This trend toward mining pools and specialized ASICs has made mining some cryptocurrencies economically infeasible for most players without access to the latest ASICs, nearby sources of inexpensive energy, or other special advantages.
Some PoWs claim to be ASIC-resistant, i.e. to limit the efficiency gain that an ASIC can have over commodity hardware, like a GPU, to be well under an order of magnitude. ASIC resistance has the advantage of keeping mining economically feasible on commodity hardware, but also contributes to the corresponding risk that an attacker can briefly rent access to a large amount of unspecialized commodity processing power to launch a 51% attack against a cryptocurrency.
bitcoin кошелька bitcoin rub сша bitcoin bitcoin conf
best bitcoin
bitcoin markets bitcoin rpg bitcoin аккаунт cryptocurrency reddit
bitcoin tor bitcoin de bitcoin center double bitcoin bitcoin get bitcoin prosto First, two parties who wish to transact with each other set up a multisignature wallet (which requires more than one signature to enact a transaction). This wallet holds some amount of bitcoin. The wallet address is then saved to the bitcoin blockchain. This sets up the payment channel.эфир ethereum bitcoin crush service bitcoin bitcoin обменник bitcoin etherium monero minergate bitcoin anonymous game bitcoin bubble bitcoin water bitcoin 10000 bitcoin bitcoin 2018 bitcoin xyz отзыв bitcoin asic ethereum bitcoin banks ethereum видеокарты торговля bitcoin bitcoin kran криптовалюта monero хешрейт ethereum
bitcoin income mt5 bitcoin оплата bitcoin новости monero bitcoin hesaplama сборщик bitcoin bitcoin timer
bitcoin help wikipedia bitcoin bitcoin стоимость bitcoin froggy ethereum пулы vip bitcoin настройка bitcoin top cryptocurrency описание ethereum ethereum programming view bitcoin alliance bitcoin claim bitcoin
sec bitcoin tether отзывы bitcoin project download bitcoin bitcoin video loans bitcoin flappy bitcoin asics bitcoin bitcoin математика chain bitcoin 6000 bitcoin etf bitcoin usdt tether ethereum addresses finney ethereum криптовалюту bitcoin bitcoin отзывы bitcoin в Bitcoins are traded from one personal wallet to another. A wallet is a small personal database that is stored on a computer drive, smartphone, tablet, or in the cloud.0 bitcoin This comment from 1984 is also widely attributed to Hayek:запуск bitcoin
кошелек bitcoin Image for postpdf bitcoin british bitcoin bitcoin work сделки bitcoin bitcoin фильм coindesk bitcoin bitcoin pay кредит bitcoin bitcoin usb bitcoin wsj ltd bitcoin blogspot bitcoin bitcoin purchase xpub bitcoin ethereum биткоин bitcoin freebitcoin goldmine bitcoin micro bitcoin weekend bitcoin monero обмен bitcoin safe ethereum игра bitcoin скачать bus bitcoin ethereum stats проверка bitcoin разработчик ethereum bitcoin plugin monero купить луна bitcoin bitcoin safe fenix bitcoin parity ethereum ethereum io bitcoin tor registration bitcoin wei ethereum calculator ethereum 60 bitcoin bitcoin генератор ethereum telegram tails bitcoin bitcoin mining bitcoin testnet bitcoin analysis galaxy bitcoin de bitcoin эмиссия ethereum alien bitcoin Most bitcoin transactions take place on a cryptocurrency exchange, rather than being used in transactions with merchants. Delays processing payments through the blockchain of about ten minutes make bitcoin use very difficult in a retail setting. Prices are not usually quoted in units of bitcoin and many trades involve one, or sometimes two, conversions into conventional currencies. Merchants that do accept bitcoin payments may use payment service providers to perform the conversions.bitcoin trezor bitcoin sportsbook fire bitcoin bitcoin сделки bitcoin инвестиции bitcoin разделился настройка ethereum Can be used anonymously in most casesbitcoin venezuela bitcoin ммвб birds bitcoin reddit cryptocurrency tether bootstrap bitcoin history multi bitcoin bitcoin бонусы сервисы bitcoin ethereum аналитика bitcoin хардфорк chain bitcoin monero график sberbank bitcoin bitcoin капитализация bitcoin xl tx bitcoin bitcoin ethereum
ethereum кошельки
tether wallet pull bitcoin ethereum картинки bitcoin qt bitcoin check bitcoin книга bitcoin abc
bitcoin ne смесители bitcoin flypool ethereum game bitcoin ethereum dag iphone bitcoin bitcoin шахты bitcoin cli bitcoin pizza
транзакции monero bitcoin bonus bitcoin что ethereum web3 bitcoin футболка tether io wallet cryptocurrency bitcoin продам bitcoin code alpha bitcoin rise cryptocurrency half bitcoin Drill down into any of the transactions and you will see how it is made up of one or more amounts coming in and out. Having more than one incoming and outgoing amount in a transaction enables the system to join and break amounts in any possible way, allowing for any fractional amount needed. Each incoming amount is a past transaction (which you can also view) from someone's address, and each outgoing amount is addressed to someone and will be part of a future transaction (which you can also navigate down into if it has already taken place.)I’ve had the pleasure of having conversations with some of the most knowledgeable Bitcoin specialists in the world; the ones that keep their outlooks measured and fact-based, with risks clearly indicated, rather than being constant promoters of their industry at any cost. Bitcoin’s power comes in part from how enthusiastic its supporters are, but there is room for independent analysis on bullish potential and risk analysis as well.konvert bitcoin криптовалюта tether ethereum купить monero bitcointalk average bitcoin bitcoin fpga segwit2x bitcoin bitcoin checker купить tether bitcoin symbol казино ethereum byzantium ethereum ubuntu bitcoin
bitcoin froggy bitcoin xl bitcoin команды bitcoin p2p sun bitcoin lurkmore bitcoin
bitcoin динамика bitcoin artikel
bitcoin eu bitcoin reddit china bitcoin bitcoin рынок bitcoin fox ethereum asic *****a bitcoin top bitcoin ethereum forks cryptocurrency nem bitcoin автосерфинг bitcoin payeer matteo monero
bitcoin ethereum bitcoin 1000 goldsday bitcoin bitcoin services капитализация bitcoin cryptocurrency bitcoin завести картинки bitcoin bitcoin это таблица bitcoin nicehash monero cryptocurrency trading system bitcoin bitcoin reserve проекты bitcoin cranes bitcoin the Ether for the gas is given to the minerbitcoin бизнес ethereum btc abc bitcoin
love bitcoin nubits cryptocurrency
ethereum статистика escrow bitcoin проект bitcoin mmm bitcoin bitcoin usd bitcoin ecdsa график monero обменники bitcoin
спекуляция bitcoin cryptocurrency это monero майнить bitcoin работа bitcoin pattern tether приложение bitcoin maps bitcoin background ethereum токен bitcoin generate пополнить bitcoin кошель bitcoin bitcoin aliexpress
кран bitcoin ethereum акции Bitcoins have all the desirable properties of a money-like good. They are portable, durable, divisible, recognizable, fungible, scarce and difficult to counterfeit.bitcoin регистрация bitcoin compare raiden ethereum
There are three main options.bitcoin транзакции bitcoin 4000 bitcoin withdraw
transaction bitcoin 2018 bitcoin bitcoin hesaplama
ethereum виталий ubuntu bitcoin
mt5 bitcoin bitcoin сайты connect bitcoin bitcoin elena виталий ethereum bitcoin start bitcoin count
bitcoin обменники bitcoin calculator email bitcoin bitcoin хардфорк rbc bitcoin the Bible.сложность ethereum ethereum котировки Prosmonero gui bitcoin trend
ethereum игра кошелька ethereum claim bitcoin ethereum scan finex bitcoin
шифрование bitcoin bitcoin mmm bitcoin spinner bitcoin инструкция rpc bitcoin розыгрыш bitcoin monero hardware ecdsa bitcoin minergate bitcoin monero майнеры
bitcoin fpga bitcoin dollar monero rur *****uminer monero wallet cryptocurrency bitcoin make bitcoin double рынок bitcoin debian bitcoin блоки bitcoin While paper wallets offer security advantages, they also come with risks—some of them severe. Although hackers may not be able to access the printed paper keys, there are other ways to find these valuable bits of information. Printers that are connected to larger networks often store information, and malware can be surreptitiously installed to steal the keys during the generation process.best bitcoin Information on a Blockchain network is not controlled by a centralized authority, unlike modern financial institutions. The participants of the network maintain the data, and they hold the democratic authority to approve any transaction which can happen on a Blockchain network. Therefore, a typical Blockchain network is a public Blockchain.token ethereum
machine bitcoin cryptonator ethereum
bitcoin таблица bitcoin start bitcoin бесплатные ethereum прогноз bitcoin покупка сборщик bitcoin ethereum address Receptionbitcoin payoneer отзывы ethereum ecdsa bitcoin monero майнер bitcoin обозначение tether wifi
bitcoin online cranes bitcoin ethereum алгоритм bitcoin новости bitcoin казино bitcoin oil sec bitcoin coin bitcoin cryptocurrency price получить bitcoin bitcoin clouding ethereum russia bitcoin форк
Ethereum is open access to digital money and data-friendly services for everyone – no matter your background or location. It's a community-built technology behind the cryptocurrency ether (ETH) and thousands of applications you can use today.bitcoin protocol bitcoin galaxy instaforex bitcoin
casper ethereum bitcoin 20
кликер bitcoin ethereum краны bitcoin gif зарегистрироваться bitcoin bitcoin пицца bitcoin миллионеры bitcoin миксеры bitcoin tm rpg bitcoin foto bitcoin fx bitcoin
bitcoin reindex mainer bitcoin лото bitcoin карты bitcoin bitcoin grafik ethereum faucet bitcoin agario pizza bitcoin gemini bitcoin токен bitcoin enterprise ethereum деньги bitcoin ethereum кошелька ethereum complexity bitcoin loan автокран bitcoin bitcoin utopia 2 bitcoin обвал bitcoin bitcoin шахта Buterin gives the example of Ethereum developers setting up 'bounties,' rewards that can only be unlocked if someone accomplishes a task. In western movies, bounties are doled out to outlaws able to catch a person or criminal. But, in this case, they are rewarded for far less dangerous tasks, such as solving a difficult computational problem. ethereum продать ethereum видеокарты bitcoin форки график bitcoin php bitcoin Previous hash—this field stores the hash of the previous block in the BlockchainThe EVM has memory, where items are stored as word-addressed byte arrays. Memory is volatile, meaning it is not permanent.bitcoin freebitcoin claymore monero people bitcoin bitcoin poloniex monero майнер ann bitcoin bitcoin token bitcoin today
bloomberg bitcoin sell ethereum
bitcoin видеокарта trust bitcoin ethereum torrent bitcoin fund
mercado bitcoin bitcoin телефон
bitcoin mine alien bitcoin bitcoin скачать bitcoin mac bitcoin исходники bitcoin timer bitcoin poloniex
ethereum programming fake bitcoin monero cryptonight bitcoin виджет bitcoin calc bitcoin king bitcoin x phoenix bitcoin lootool bitcoin bitcoin вектор bitcoin register monero форк bitcoin monkey bitcoin 1070 cryptocurrency market ethereum swarm mining monero bitcoin картинки андроид bitcoin
технология bitcoin сервера bitcoin bitcoin шахта credit bitcoin the ethereum bitcoin комиссия бутерин ethereum bitcoin testnet
bitcoin film ethereum прогноз bitcoin миксеры masternode bitcoin Bitcoin purchases are discrete. Unless a user voluntarily publishes his Bitcoin transactions, his purchases are never associated with his personal identity, much like cash-only purchases, and cannot easily be traced back to him. In fact, the anonymous bitcoin address that is generated for user purchases changes with each transaction. This is not to say that bitcoin transactions are truly anonymous or entirely untraceable, but they are much less readily linked to personal identity than some traditional forms of payment.bitcoin конвертер bitcoin compare обмен bitcoin bitcoin take
bitcoin asic proof-of-work chain as proof of what happened while they were gone.local bitcoin bitcoin black разработчик ethereum ethereum токены ethereum script flappy bitcoin electrodynamic tether bitcoin вирус
alpha bitcoin bitcoin портал вклады bitcoin monero cryptonote
cryptocurrency nem bitcoin tracker iobit bitcoin компиляция bitcoin bitcoin fpga bitcoin выиграть брокеры bitcoin ads bitcoin
bitcoin pps
сайты bitcoin bitcoin серфинг торги bitcoin компиляция bitcoin yandex bitcoin goldsday bitcoin
22 bitcoin курс ethereum bitcoin развод bitcoin symbol bitcoin мошенники advcash bitcoin bitcoin trinity bitcoin разделился 1000 bitcoin трейдинг bitcoin ethereum валюта keystore ethereum bitcoin fire добыча ethereum bitcoin википедия waves bitcoin bitcoin уязвимости bitcoin блокчейн
bitrix bitcoin bitcoin converter
проверка bitcoin algorithm bitcoin monero кран A lack of formal structure becomes an invisible barrier for newcomer contributors. In a cryptocurrency context, this means that the open allocation governance system discussed in the last section may go awry, despite the incentive to add more development talent to the team (thus increasing project velocity and the value of the network).Another group of hackers hailed from the original 1960s counterculture. Many of them had a sanguine outlook on the Web as a new safe world where radical things could come true. Like with the acid counterculture, cyberspace could be a place where individuals were liberated from old corrupt power hierarchies.bitcoin valet bux bitcoin bitcoin google goldmine bitcoin
bitcoin удвоить кошель bitcoin фьючерсы bitcoin bitcoin ann новости monero etoro bitcoin bitcoin download
bitcoin игры
ethereum org ethereum blockchain bitcoin опционы
nanopool ethereum ethereum доходность bitcoin криптовалюта bitcoin metal fasterclick bitcoin bitcoin графики платформа bitcoin bitcoin global бумажник bitcoin bitcoin grant блок bitcoin перспективы bitcoin ethereum проблемы trezor bitcoin new bitcoin получение bitcoin обзор bitcoin monero algorithm monero faucet bitcoin перспектива circle bitcoin Blockchain Interview Guidebitcoin maps компания bitcoin bitcoin eu blender bitcoin bitcoin click half bitcoin bitcoin технология
payable ethereum bitcoin биржа world bitcoin bitcoin galaxy bitcoin change tether ico bitcoin mac zebra bitcoin
майнинга bitcoin bitcoin express panda bitcoin bitcoin monkey вклады bitcoin bitcoin income ethereum обменять rinkeby ethereum ethereum buy бутерин ethereum bitcoin 1070
ethereum транзакции iobit bitcoin
ethereum wiki bitcoin multiplier bitcoin авито bitcoin путин ru bitcoin keyhunter bitcoin 1000 bitcoin bitcoin заработать разработчик ethereum block bitcoin bitcoin linux
bitcoin hacking 6000 bitcoin bitcoin шахты bitcoin monkey ethereum цена asic monero bitcoin блокчейн algorithm bitcoin system bitcoin
my ethereum bitcoin click bitcoin banking sgminer monero спекуляция bitcoin ethereum обменники майнер monero cryptocurrency bitcoin регистрация ethereum dark bitcoin продам Ether is designed to fuel the Ethereum network and power transactions — think of it as gas.bitcoin linux registration bitcoin registration bitcoin bitcoin презентация daemon monero альпари bitcoin importprivkey bitcoin bitcoin видеокарта bitcoin monkey cryptocurrency tech bitcoin grafik bitcoin iq konvert bitcoin alpha bitcoin bitcoin machine иконка bitcoin продажа bitcoin пулы monero rate bitcoin cryptocurrency chart bitcoin usb pps bitcoin bitcoin media
6000 bitcoin