Bitcoin is "Worse is Better"

Re:Bitcoin is "Worse is Better" by gwern on Monday August 29, 2011 @10:53AM (#2937352)

...Not really. The point is not that you can make it harder, as you say both Bcrypt and zero-finding in SHA hashes can be adjusted and made harder. The point is that the constant factor speedups available from specialty hardware are greater for SHA than they are for Bcrypt.

[ Parent | on HN ]

Re:Bitcoin is "Worse is Better" by tptacek on Monday August 29, 2011 @12:04PM (#2937615)

First, I don't think your specific point is true. Second, and more importantly, the benefit of hardware isn't that it changes the constant factors; it's that it parallelizes the search. The whole point of scrypt is to create a state explosion that prevents that parallelization.

[ Parent | on HN ]

Re:Bitcoin is "Worse is Better" by gwern on Monday August 29, 2011 @02:57PM (#2938330)

Parallelization is a constant factor. If you have 1000 processors, you get a constant-factor one-time speedup of 1000x (or less). No complexity class changes.

[ Parent | on HN ]