Proof of work
From Wikipedia, the free encyclopedia
Jump to navigationJump to search
This article may require cleanup to meet Wikipedia's quality standards. The specific problem is: Needs verification and documentation Please help improve this article if you can. (May 2015) (Learn how and when to remove this template message)
Proof of work (PoW) is a form of cryptographic zero-knowledge proof in which one party (the prover) proves to others (the verifiers) that a certain amount of computational effort has been expended for some purpose. Verifiers can subsequently confirm this expenditure with minimal effort on their part. The concept was invented by Cynthia Dwork and Moni Naor in 1993 as a way to deter denial-of-service attacks and other service abuses such as spam on a network by requiring some work from a service requester, usually meaning processing time by a computer. The term "proof of work" was first coined and formalized in a 1999 paper by Markus Jakobsson and Ari Juels. Proof of work was later popularized by Bitcoin as a foundation for consensus in permissionless blockchains and cryptocurrencies, in which miners compete to append blocks and mint new currency, each miner experiencing a success probability proportional to the amount of computational effort they have provably expended. PoW and PoS (Proof of Stake) are the two best known consensus mechanisms and in the context of cryptocurrencies also most commonly used.
A key feature of proof-of-work schemes is their asymmetry: the work must be moderately hard (yet feasible) on the prover or requester side but easy to check for the verifier or service provider. This idea is also known as a CPU cost function, client puzzle, computational puzzle, or CPU pricing function. It is distinct in purpose from a CAPTCHA, which is intended for a human to solve quickly, while being difficult to solve for a computer.
Contents
1 Background
2 Variants
3 List of proof-of-work functions
4 Reusable proof-of-work as e-money
4.1 Bitcoin-type proof of work
4.2 Energy consumption
5 ASICs and mining pools
6 See also
7 Notes
8 References
9 External links
Background
One popular system, used in Hashcash, uses partial hash inversions to prove that work was done, as a goodwill token to send an e-mail. For instance, the following header represents about 252 hash computations to send a message to calvin@comics.net on January 19, 2038:
X-Hashcash: 1:52:380119:calvin@comics.net:::9B760005E92F0DAE
It is verified with a single computation by checking that the SHA-1 hash of the stamp (omit the header name X-Hashcash: including the colon and any amount of whitespace following it up to the digit '1') begins with 52 binary zeros, that is 13 hexadecimal zeros:
0000000000000756af69e2ffbdb930261873cd71
Whether PoW systems can actually solve a particular denial-of-service issue such as the spam problem is subject to debate; the system must make sending spam emails obtrusively unproductive for the spammer, but should also not prevent legitimate users from sending their messages. In other words, a genuine user should not encounter any difficulties when sending an email, but an email spammer would have to expend a considerable amount of computing power to send out many emails at once. Proof-of-work systems are being used as a primitive by other more complex cryptographic systems such as bitcoin which uses a system similar to Hashcash.
Variants
There are two classes of proof-of-work protocols.
Challenge–response protocols assume a direct interactive link between the requester (client) and the provider (server). The provider chooses a challenge, say an item in a set with a property, the requester finds the relevant response in the set, which is sent back and checked by the provider. As the challenge is chosen on the spot by the provider, its difficulty can be adapted to its current load. The work on the requester side may be bounded if the challenge-response protocol has a known solution (chosen by the provider), or is known to exist within a bounded search space.
Proof of Work challenge response.svg
Solution–verification protocols do not assume such a link: as a result, the problem must be self-imposed before a solution is sought by the requester, and the provider must check both the problem choice and the found solution. Most such schemes are unbounded probabilistic iterative procedures such as Hashcash.
Proof of Work solution verification.svg
Known-solution protocols tend to have slightly lower variance than unbounded probabilistic protocols because the variance of a rectangular distribution is lower than the variance of a Poisson distribution (with the same mean).[further explanation needed] A generic technique for reducing variance is to use multiple independent sub-challenges, as the average of multiple samples will have a lower variance.
There are also fixed-cost functions such as the time-lock puzzle.
Moreover, the underlying functions used by these schemes may be:
CPU-bound where the computation runs at the speed of the processor, which greatly varies in time, as well as from high-end server to low-end portable devices.
Memory-bound where the computation speed is bound by main memory accesses (either latency or bandwidth), the performance of which is expected to be less sensitive to hardware evolution.
Network-bound if the client must perform few computations, but must collect some tokens from remote servers before querying the final service provider. In this sense, the work is not actually performed by the requester, but it incurs delays anyway because of the latency to get the required tokens.
Finally, some PoW systems offer shortcut computations that allow participants who know a secret, typically a private key, to generate cheap PoWs. The rationale is that mailing-list holders may generate stamps for every recipient without incurring a high cost. Whether such a feature is desirable depends on the usage scenario.
List of proof-of-work functions
Here is a list of known proof-of-work functions:
Integer square root modulo a large prime[dubious – discuss]
Weaken Fiat–Shamir signatures
Ong–Schnorr–Shamir signature broken by Pollard
Partial hash inversion This paper formalizes the idea of a proof of work and introduces "the dependent idea of a bread pudding protocol", a "re-usable proof-of-work" (RPoW) system.
Hash sequences
Puzzles
Diffie–Hellman–based puzzle
Moderate
Mbound
Hokkaido
Cuckoo Cycle
Merkle tree–based
Guided tour puzzle protocol
Reusable proof-of-work as e-money
Computer scientist Hal Finney built on the proof-of-work idea, yielding a system that exploited reusable proof of work (RPoW). The idea of making proofs of work reusable for some practical purpose had already been established in 1999. Finney's purpose for RPoW was as token money. Just as a gold coin's value is thought to be underpinned by the value of the raw gold needed to make it, the value of an RPoW token is guaranteed by the value of the real-world resources required to 'mint' a PoW token. In Finney's version of RPoW, the PoW token is a piece of Hashcash.
A website can demand a PoW token in exchange for service. Requiring a PoW token from users would inhibit frivolous or excessive use of the service, sparing the service's underlying resources, such as bandwidth to the Internet, computation, disk space, electricity, and administrative overhead.
Finney's RPoW system differed from a PoW system in permitting the random exchange of tokens without repeating the work required to generate them. After someone had "spent" a PoW token at a website, the website's operator could exchange that "spent" PoW token for a new, unspent RPoW token, which could then be spent at some third-party website similarly equipped to accept RPoW tokens. This would save the resources otherwise needed to 'mint' a PoW token. The anti-counterfeit property of the RPoW token was guaranteed by remote attestation. The RPoW server that exchanges a used PoW or RPoW token for a new one of equal value uses remote attestation to allow any interested party to verify what software is running on the RPoW server. Since the source code for Finney's RPoW software was published (under a BSD-like license), any sufficiently knowledgeable programmer could, by inspecting the code, verify that the software (and, by extension, the RPoW server) never issued a new token except in exchange for a spent token of equal value.
Until 2009, Finney's system was the only RPoW system to have been implemented; it never saw economically significant use.
RPoW is protected by the private keys stored in the trusted platform module (TPM) hardware and manufacturers holding TPM private keys. Stealing a TPM manufacturer's key or obtaining the key by examining the TPM chip itself would subvert that assurance.
Bitcoin-type proof of work
In 2009, the Bitcoin network went online. Bitcoin is a proof-of-work cryptocurrency that, like Finney's RPoW, is also based on the Hashcash PoW. But in Bitcoin, double-spend protection is provided by a decentralized P2P protocol for tracking transfers of coins, rather than the hardware trusted computing function used by RPoW. Bitcoin has better trustworthiness because it is protected by computation. Bitcoins are "mined" using the Hashcash proof-of-work function by individual miners and verified by the decentralized nodes in the P2P bitcoin network.
The difficulty is periodically adjusted to keep the block time around a target time.
Energy consumption
Since the creation of Bitcoin, proof-of-work has been the predominant design of peer-to-peer cryptocurrency. Many studies have been looking at the energy consumption of mining. The PoW mechanism requires a vast amount of computing resources, which consume a significant amount of electricity. Bitcoin's energy consumption can power an entire country.
However, there is no alternative design known that could replace proof-of-work but keeps its desirable attributes such as:[citation needed]
permissionless mining
fair distribution of coins
security against many known attacks
bootstrappability of new nodes in a hostile environment
graceful degradation and recovery even in the face of a successful attack or network failure
unforgeable and statically verifiable costliness
Also, there have been many attempts at making proof-of-work use non-specialist hardware. However, this is neither possible, because any specific proof-of-work function can be optimised with hardware, nor desirable, because specialist mining equipment improves security by committing miners to the specific network they are mining for.[citation needed]
ASICs and mining pools
Within the Bitcoin community there are groups working together in mining pools. Some miners use application-specific integrated circuits (ASICs) for PoW. This trend toward mining pools and specialized ASICs has made mining some cryptocurrencies economically infeasible for most players without access to the latest ASICs, nearby sources of inexpensive energy, or other special advantages.
Some PoWs claim to be ASIC-resistant, i.e. to limit the efficiency gain that an ASIC can have over commodity hardware, like a GPU, to be well under an order of magnitude. ASIC resistance has the advantage of keeping mining economically feasible on commodity hardware, but also contributes to the corresponding risk that an attacker can briefly rent access to a large amount of unspecialized commodity processing power to launch a 51% attack against a cryptocurrency.
Key conceptsbitcoin аналоги monero биржи converter bitcoin mineable cryptocurrency эфириум ethereum bitcoin formula взлом bitcoin bitcoin avto bitcoin статистика bitcoin project bitcoin работать xmr monero
покупка bitcoin
monero faucet bitcoin nyse bitcoin demo
blog bitcoin bitcoin dice monero usd ethereum block cubits bitcoin average bitcoin 4000 bitcoin bus bitcoin bitcoin ads bitcoin курсы Ethereum enthusiasts aim to hand control back to users with the help of a blockchain, a technology that decentralizes data so that thousands of people around the world are handed a copy. Developers can use Ethereum to build leaderless applications, which means that a user’s data cannot be tampered with by the service’s creators.Smaller hedge funds have already been dabbling in Bitcoin, and Tudor Jones may be the largest investor to date to get into it. There are now firms that have services directed at getting institutional investors on board with Bitcoin, whether they be hedge funds, pensions, family offices, or RIA Firms, by providing them the enterprise-grade security and execution they need, in an asset class that has historically been focused mainly on retail adoption. Even an asset manager as large as Fidelity now has a group dedicated to providing institutional cryptocurrency solutions.bitcoin agario покер bitcoin ledger bitcoin ethereum coin ethereum форки википедия ethereum bitcoin обозначение earn bitcoin This might not seem practically for non-technical users, but in actuality, the Bitcoin software does the work of rejecting incorrect data. Technical users or developers building Bitcoin-related services can inspect or alter their own copy of the Bitcoin blockchain or software locally to understand how it works.Why This is Unlike the Great Depressionhomestead ethereum
ethereum кошельки bitcoin математика bitcoin форк live bitcoin ethereum перевод ethereum курсы alipay bitcoin bitcoin loans apple bitcoin ethereum price ethereum course pool bitcoin bitcoin магазин bitcoin freebitcoin создать bitcoin rocket bitcoin прогнозы ethereum bitcoin wmx кредит bitcoin rate bitcoin
tether usd bitcoin work
amd bitcoin надежность bitcoin multiply bitcoin tether usdt аккаунт bitcoin
ethereum php
ethereum вывод сколько bitcoin консультации bitcoin tether usd go ethereum bitcoin vk bitcoin торговать bitcoin token bitcoin zebra blacktrail bitcoin
bitcoin реклама работа bitcoin ethereum siacoin
bitcoin best карты bitcoin payeer bitcoin аналитика ethereum sberbank bitcoin shot bitcoin проект bitcoin займ bitcoin bitcoin сборщик андроид bitcoin bitcoin fire bitcoin koshelek проекта ethereum Satoshi Nakamoto stated in his white paper that: 'The root problem with conventional currencies is all the trust that's required to make it work. The central bank must be trusted not to debase the currency, but the history of fiat currencies is full of breaches of that trust.'difficulty ethereum работа bitcoin convert bitcoin bitcoin clicks android tether start bitcoin bitcoin system bitcoin ads bitcoin форк bitcoin explorer ethereum ethereum exchange bitcoin рбк инструкция bitcoin
bitcoin ira bitcoin it bitcoin mercado bitcoin 50 bitcoin xyz
bitcoin apple ethereum ротаторы заработок ethereum bitcoin команды satoshi bitcoin
bitcoin бонус
бесплатные bitcoin bitcoin blue api bitcoin bitcoin пополнить bitcoin boom bitcoin signals bitcoin node ethereum info reddit bitcoin daily bitcoin ethereum заработок monero pro bitcoin значок команды bitcoin эфир bitcoin зарабатывать bitcoin ethereum транзакции заработка bitcoin bitcoin оплата bitcoin aliexpress андроид bitcoin bitcoin футболка monero обменник birds bitcoin forbes bitcoin bitcoin income тинькофф bitcoin bitcoin cny lavkalavka bitcoin протокол bitcoin bitcoin mixer bitcoin two курс monero получить bitcoin bitcoin oil bitcoin location 22 bitcoin капитализация ethereum monero minergate daemon bitcoin rise cryptocurrency bitcoin ukraine bitcoin steam bitcoin вконтакте blog bitcoin bitcoin компания bitcoin core bitcoin fake bitcoin портал ethereum dark блог bitcoin monero hardware keystore ethereum bitcoin расшифровка bitcoin london monero сложность bitcoin two bitcoin bitcoin настройка шрифт bitcoin ethereum платформа bitcoin etherium bitcoin s dogecoin bitcoin polkadot su kurs bitcoin cryptocurrency calendar
bitcoin greenaddress mikrotik bitcoin tether ico bitcoin genesis партнерка bitcoin bitcoin generator monero benchmark зебра bitcoin 2016 bitcoin
sberbank bitcoin
bitcoin green monero asic сайте bitcoin Contentsсигналы bitcoin bitcoin аналитика explorer ethereum отдам bitcoin bitcoin air bitcoin slots bitcoin комбайн s bitcoin monero продать рост ethereum андроид bitcoin bitcoin investment сатоши bitcoin bitcoin купить ethereum casino bitcoin вебмани secp256k1 ethereum bitcoin amazon bitcoin alien bitcoin войти bitcoin bitminer bitcoin capitalization bitcoin symbol bitcoin doubler сайт ethereum
abi ethereum bank cryptocurrency bitcoin location продаю bitcoin bitcoin galaxy bitcoin trojan bitcoin сайт
cubits bitcoin android tether bitcoin rpg ethereum упал blue bitcoin bitcoin loans bitcoin flex bitcoin otc top cryptocurrency bitcoin таблица bitcoin joker bitcoin проверить monero js основатель ethereum bitcoin mt4
fx bitcoin bitcoin автокран transactions bitcoin bitcoin statistic bitcoin акции monero майнеры bitcoin доллар bitcoin blocks ethereum supernova
bitcoin start история ethereum tether tools bitcoin конец биржа monero bitcoin play the ethereum bitcoin broker bio bitcoin
pos bitcoin bitcoin options
secp256k1 bitcoin algorithm ethereum billionaire bitcoin 99 bitcoin ethereum geth jaxx bitcoin биржа ethereum mikrotik bitcoin 1 ethereum
bitcoin конверт продаю bitcoin converter bitcoin ethereum casino bitcoin expanse cryptocurrency tech 6000 bitcoin
second bitcoin bitcoin ethereum bitcoin paper bitfenix bitcoin
get bitcoin finney ethereum bitcoin автоматически
bitcoin капитализация forum bitcoin ethereum code сети ethereum ютуб bitcoin go ethereum продать ethereum
ad bitcoin комиссия bitcoin bitcoin script bitcoin in смесители bitcoin wallets cryptocurrency Cryptocurrencies like Bitcoin, Ethereum, and Litecoin are making headlines because the value of these currencies has risen dramatically over the last year. These currencies rely on complicated mathematics and blockchain technology to create a system that allows users to pay, store, and get value from these currencies.bitcoin fire
monero кошелек win bitcoin bitcoin продам
ethereum poloniex cfd bitcoin cap bitcoin
bitcoin 2000 bitcoin ваучер bitcoin journal bitcoin ann bitfenix bitcoin free monero locate bitcoin game bitcoin bitcoin airbit monero spelunker купить bitcoin
алгоритм bitcoin bitcoin zebra ферма ethereum sell bitcoin ethereum конвертер bitcoin википедия криптовалюту bitcoin
bitcoin описание bitcoin stealer monero asic
bitcoin etf bitcoin generation заработать monero
bitcoin карта bitcoin captcha bitcoin scanner ethereum shares vps bitcoin bitcoin 2017 проблемы bitcoin ethereum stats ethereum конвертер bitcoin play теханализ bitcoin bitcoin деньги bitcoin краны акции bitcoin ethereum supernova bitcoin кредит pps bitcoin ethereum pools bitcoin cran bitcoin hunter foto bitcoin bitcoin conf bitcoin проблемы monero miner bitcoin cards bitcoin майнинг block bitcoin калькулятор monero video bitcoin
tether limited dat bitcoin bitcoin all p2pool ethereum bitcoin word blue bitcoin difficulty bitcoin local bitcoin strategy bitcoin download bitcoin cryptocurrency gold bitcoin dark rus bitcoin
Alternatives to Coinbase: What Else Is out There?monero пул tether apk bitcoin project хардфорк monero The ATO does not classify cryptocurrency splits as taxation events. The ATO classifies the versions of the blockchain coming from the splits as the 'original blockchain' and the 'new blockchain'. In relation to the cost base, the cryptocurrency on the original blockchain should be assigned all the original cost base, while the cryptocurrency on the new blockchain should be assigned cost base zero.ethereum crane flappy bitcoin bitcoin london ru bitcoin bitcoin ecdsa bitcoin транзакции ethereum coingecko monero simplewallet оплата bitcoin bitcoin novosti bitcoin pattern ethereum обменять bitcoin client bitcoin passphrase bitcoin oil компьютер bitcoin вклады bitcoin bitcoin автокран транзакции monero
deep bitcoin bitcoin кошельки
bitcoin usd кости bitcoin ethereum конвертер monero cryptonote bitcoin accelerator bitcoin alert bitcoin россия
bitcoin spinner курс ethereum bitcoin algorithm обналичить bitcoin us bitcoin rate bitcoin alpha bitcoin ethereum криптовалюта bitcoin community
ethereum mist инвестирование bitcoin
monero calc
converter bitcoin
bitcoin википедия бесплатный bitcoin playstation bitcoin bitcoin коллектор bitcoin magazin proxy bitcoin bitcoin register unconfirmed bitcoin
ethereum клиент bitcoin fpga trezor ethereum bitcoin help bitcoin donate difficulty monero ethereum contract bitcoin mail bitcoin grant получить ethereum генератор bitcoin bitcoin mining bitcoin блог валюты bitcoin
pools bitcoin bitcoin eth account bitcoin bitcoin birds bitcoin community bitcoin презентация bitcoin chains tether 2 bitcoin weekly moto bitcoin bitcoin взлом ethereum faucets algorithm ethereum bitcoin io bitcoin word bitcoin 2000 bitcoin вывод
криптовалюта ethereum bitcoin instaforex purse bitcoin bitcoin p2p майнер ethereum принимаем bitcoin carding bitcoin bitcoin advcash bitcoin scam bitcoin reserve monero купить исходники bitcoin cms bitcoin bitcoin ann asic monero usa bitcoin bitcoin services bitcoin серфинг fx bitcoin падение bitcoin bitcoin взлом bitcoin транзакция forum cryptocurrency япония bitcoin ethereum покупка bitcoin greenaddress nova bitcoin
dark bitcoin 1 bitcoin 1 ethereum bitcoin etf bitcoin ставки bitcoin coin coffee bitcoin
poloniex ethereum
bitcoin сша mail bitcoin
monero форк collector bitcoin шахты bitcoin bitcoin loto bitcoin pattern github ethereum bitcoin расчет programming bitcoin форум bitcoin кошелька bitcoin
car bitcoin bitcoin poloniex bitcoin double Each mining computer will run the smart contract on their computer using their Ethereum Virtual Machine as part of the mining process, and come to a conclusion about the output. In theory, if no one is behaving badly, each computer on the Ethereum network will come to the same conclusion because they are running the same contract code with the same supplied information.скрипты bitcoin bitcoin nvidia ethereum chart half bitcoin ethereum pool bitcoin windows брокеры bitcoin primedice bitcoin service bitcoin web3 ethereum
tether limited
проверить bitcoin майнеры ethereum poloniex monero community bitcoin bitcoin что cryptocurrency exchange bitcoin local bitcoin local rx580 monero
bitcoin видеокарты курса ethereum weather bitcoin torrent bitcoin ethereum заработать bitcoin котировки erc20 ethereum opencart bitcoin monero cryptonote cryptocurrency trading polkadot store connect bitcoin Ultimately, the governance of the protocol does not occur via a well-defined, top-down fashion. Rather, it inverts traditional models of governance via enforcement from the bottom up.location bitcoin click bitcoin bitcoin часы краны monero capitalization cryptocurrency магазин bitcoin
ethereum видеокарты apple bitcoin Why we believe Bitcoin Satisfies Assurance 1:google bitcoin system bitcoin p2pool ethereum block ethereum транзакции bitcoin bitcoin transaction cryptocurrency capitalisation bitcoin сервисы платформы ethereum bitcoin ocean 2x bitcoin fast bitcoin programming bitcoin bitcoin blockstream
bitcoin crypto bitcoin farm ethereum перспективы bitcoin мошенничество testnet ethereum accepts bitcoin боты bitcoin fasterclick bitcoin халява bitcoin ad bitcoin nanopool ethereum обменять monero майнинг monero bitcoin tails pay bitcoin reward bitcoin bitcoin список ads bitcoin bitcoin phoenix georgia bitcoin ethereum classic secp256k1 bitcoin bitcoin экспресс bitcoin com bitcoin betting bitcoin calculator блоки bitcoin txid bitcoin карта bitcoin bitcoinwisdom ethereum When you go to your internet browser and type in ‘www.google.com’, your computer starts a conversation with Google’s computers. Then, both computers start talking to each other and your browser shows images, buttons, etc. If Google’s servers were down for some reason, you wouldn’t be able to see these images and buttons. This is because the data is stored on a centralized network — it’s in one place.bitcoin lurk phoenix bitcoin bitcoin project bitcoin address bitcoin пулы moneybox bitcoin