<p>So long as the difficulty can drop low enough there won't be a problem. If nobody cares about the currency, then it won't matter. If anyone cares about the currency enough, they'll mine a block. The only threat is if a large amount of mining power leaves at once. In this case, the difficulty can be very high and it can be difficult to muster enough mining power to get to the point where the difficulty drops.</p>

<p>But that's not the real problem. The real problem is that ASIC-resistant coins will always be much less secure than coins that can be mined by ASICs. With coins that can be mined by ASICs, anyone who wants to attack the coin must first invest heavily in the coin by buying ASICs -- an investment they will make worthless if their attack is successful. By contrast, coins that can be mined efficiently by CPUs and GPUs can easily be attacked with rented computer power and botnets, at much lower relative cost.</p>

CC BY-SA 3.0
2014-02-11T21:47:47.493Z
I doubt the wortlessness of attack you mentioned. ASICs used to attack one coin could later be used to honestly mine any other coin sharing the same hashing algorithm (unless there's only one coin using said algorithm, of course).
aland
CC BY-SA 3.0
2014-02-11T22:05:33.997Z
@aland That's only true for coins that aren't worth attacking.
David Schwartz
CC BY-SA 3.0
2014-02-11T21:30:38.417Z
2014-02-11T21:30:38.417Z
David Schwartz
<p>scrypt and scrypt-jane were chosen not because thay are "more difficult" then SHA-256, they are just different, and less suitable for GPU/ASIC implementation.</p>

<p>Whether using such algorithms is good or not is hard to tell. I'd say, since one can mine scrypt coins with commodity hardware now, while mining SHA256 coins even with decent GPU rig is futile, scrypt helps coin be more decentralized, which is a good thing.</p>

<p>One can of course create very difficult hashing algorithm (I'd say 10^80 rounds of bcrypt will be enough to ensure no one calculates a single hash ever). But cryptocurrency with such algorithm is unusable, and so would be forfeited. </p>

CC BY-SA 3.0
2014-02-11T07:26:21.543Z
2014-02-11T07:26:21.543Z
aland
<p>The necessity for having a difficult hashing function like the current one is two-fold:</p>

<p>a) it serves as proof-of-work, and make necessary some computing powe to find it. The harder you work, the easiest you get the reward, no short-cuts.</p>

<p>b) it helps controlling unnecessary proliferation of blocks. Automatic difficulty setting keeps the blocks coming out one every ten minutes, no matter how much aggregate computing power is invested in the network.</p>

CC BY-SA 3.0
2014-02-11T07:20:56.930Z
2014-02-11T07:20:56.930Z
Envite
<p>To avoid GPU/ASIC mining, difficult hashing functions, such as scrypt and scrypt-jane, are proposed as PoW algorithm (However, GPU and ASIC are also suitable for basic scrypt operation). Is it good for the cryptocurrency? Because a difficult algorithm also means CPU needs to spend much more time to find the solution. Although the "difficulty" of the cryptocurrency is dynamic and adjustable, maybe one day a very complicated algorithm scrypt-xXx is proposed, it might be hard to find the nonce even when the difficulty is very low. Will it create some problems to the cryptocurrency?</p>

CC BY-SA 3.0
2014-02-11T13:41:16.497Z
[Vertcoin](http://vertcoin.org), a new cryptocurrency, claims to be completely ASIC-resistant with a "Scrypt-Adaptive-Nfactor" algorithm. [Their paper](http://vertcoin.org/Vertcoin-DavidMuller.pdf) explains it albeit at a very high level.
Giorgio
<scrypt><algorithms><asic-resistance>
Is difficult hashing algorithm necessary?
jclin
# Is difficult hashing algorithm necessary?

(Asked by: username_0 on 2014-02-11)

To avoid GPU/ASIC mining, difficult hashing functions, such as scrypt and scrypt-jane, are proposed as PoW algorithm (However, GPU and ASIC are also suitable for basic scrypt operation). Is it good for the cryptocurrency? Because a difficult algorithm also means CPU needs to spend much more time to find the solution. Although the "difficulty" of the cryptocurrency is dynamic and adjustable, maybe one day a very complicated algorithm scrypt-xXx is proposed, it might be hard to find the nonce even when the difficulty is very low. Will it create some problems to the cryptocurrency?

**Tags:** scrypt, algorithms, asic-resistance

> **Comments:**
> **username_1**: [Vertcoin](http://vertcoin.org), a new cryptocurrency, claims to be completely ASIC-resistant with a "Scrypt-Adaptive-Nfactor" algorithm. [Their paper](http://vertcoin.org/Vertcoin-DavidMuller.pdf) explains it albeit at a very high level.  

---

## 3 answers

### Answer by username_2 on 2014-02-11. Score: 2

So long as the difficulty can drop low enough there won't be a problem. If nobody cares about the currency, then it won't matter. If anyone cares about the currency enough, they'll mine a block. The only threat is if a large amount of mining power leaves at once. In this case, the difficulty can be very high and it can be difficult to muster enough mining power to get to the point where the difficulty drops.

But that's not the real problem. The real problem is that ASIC-resistant coins will always be much less secure than coins that can be mined by ASICs. With coins that can be mined by ASICs, anyone who wants to attack the coin must first invest heavily in the coin by buying ASICs -- an investment they will make worthless if their attack is successful. By contrast, coins that can be mined efficiently by CPUs and GPUs can easily be attacked with rented computer power and botnets, at much lower relative cost.

> **Comments:**
> **username_3**: I doubt the wortlessness of attack you mentioned. ASICs used to attack one coin could later be used to honestly mine any other coin sharing the same hashing algorithm (unless there's only one coin using said algorithm, of course).  
> **username_2**: @username_3 That's only true for coins that aren't worth attacking.  

---

### Answer by username_3 on 2014-02-11. Score: 2

scrypt and scrypt-jane were chosen not because thay are "more difficult" then SHA-256, they are just different, and less suitable for GPU/ASIC implementation.

Whether using such algorithms is good or not is hard to tell. I'd say, since one can mine scrypt coins with commodity hardware now, while mining SHA256 coins even with decent GPU rig is futile, scrypt helps coin be more decentralized, which is a good thing.

One can of course create very difficult hashing algorithm (I'd say 10^80 rounds of bcrypt will be enough to ensure no one calculates a single hash ever). But cryptocurrency with such algorithm is unusable, and so would be forfeited.


---

### Answer by username_4 on 2014-02-11. Score: 0

The necessity for having a difficult hashing function like the current one is two-fold:

a) it serves as proof-of-work, and make necessary some computing powe to find it. The harder you work, the easiest you get the reward, no short-cuts.

b) it helps controlling unnecessary proliferation of blocks. Automatic difficulty setting keeps the blocks coming out one every ten minutes, no matter how much aggregate computing power is invested in the network.


---

