Bitcoin Forum
June 15, 2024, 10:21:16 PM *
News: Voting for pizza day contest
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Can anyone explain how the Bitcoin cryptography works in layman's terms?  (Read 1189 times)
BladerunnerB26354 (OP)
Newbie
*
Offline Offline

Activity: 20
Merit: 0


View Profile
October 08, 2014, 11:43:50 AM
 #1

I've read up quite a bit on Bitcoin's cryptography, but still find it difficult to understand.

Could any of you explain it in layman's terms please?

Many thanks Smiley
corebob
Full Member
***
Offline Offline

Activity: 238
Merit: 100


View Profile
October 08, 2014, 11:47:38 AM
 #2

Did you read AA's book yet?

https://github.com/aantonop/bitcoinbook
remotemass
Legendary
*
Offline Offline

Activity: 1119
Merit: 1017


ASMR El Salvador


View Profile WWW
October 08, 2014, 11:56:00 AM
 #3

How Bitcoin Works Under the Hood [youtube]
http://www.youtube.com/watch?v=Lx9zgZCMqXE

{ Imagine a sequence of bits generated from the first decimal place of the square roots of whole integers that are irrational numbers. If the decimal falls between 0 and 5, it's considered bit 0, and if it falls between 5 and 10, it's considered bit 1. This sequence from a simple integer count of contiguous irrationals and their logical decimal expansion of the first decimal place is called the 'main irrational stream.' Our goal is to design a physical and optical computing system system that can detect when this stream starts matching a specific pattern of a given size of bits. bitcointalk.org/index.php?topic=166760.0 } Satoshi did use a friend class in C++ and put a comment on the code saying: "This is why people hate C++".
Q7
Sr. Member
****
Offline Offline

Activity: 448
Merit: 250


View Profile WWW
October 08, 2014, 12:05:30 PM
 #4

A crypto currency not like any fiat currency is owned by the community

It has a blockchain or public ledger maintained by the community. Layman's all transactions get written there

Transactions are being processed by hash rate contributed by the community or otherwise known as miners

In return miners get paid from new coins and in part from the transaction fee

What else do you need to know?



lihuajkl
Legendary
*
Offline Offline

Activity: 1596
Merit: 1000


View Profile
October 08, 2014, 12:09:46 PM
 #5

Have you been here https://bitcoin.org/ the official site of bitcoin, which explains bitcoin in easy terms.
DannyHamilton
Legendary
*
Offline Offline

Activity: 3430
Merit: 4659



View Profile
October 08, 2014, 12:23:17 PM
 #6

Which part are you finding difficult to understand?

Are you familiar with the concept of a digital signature?

Are you familiar with the concept of a hash?

Are you familiar with the concept of proof-of-work?

That's all the cryptography that bitcoin uses.  Once you understand those three concepts, you understand bitcoin's cryptography.
BladerunnerB26354 (OP)
Newbie
*
Offline Offline

Activity: 20
Merit: 0


View Profile
October 08, 2014, 12:37:15 PM
 #7

Thanks for the links guys, will read now.

Here is my current understanding, by the way Smiley

The block chain is the main innovation of Bitcoin. Every transaction you make with a Bitcoin, adds a block – a copy of this ledger, to every BTC in existence.

A block chain is a transaction legder. A full copy of a currency's block chain contains every transaction ever executed in every Bitcoin in the currency.

When you want to spend a BTC, the system uses asymmetric cryptography – where you have both a public key (like a PO Box) and a private key – a signature to say you authorise spending of that BTC (like a key to the PO Box).

When you spend a BTC, the BTC network generates a mathematical puzzle to solve, in order to approve & add that transaction to the Block chain. This puzzle is so difficult, it takes the worldwide network an average of 10 minutes to solve – so it is mathematically impossible for one person (or group) to fraudulently create transactions.

The large data puzzle might be “find the integer square root of 2.16 to power of 37”.

The solution to this is called a Hash, which basically means short hand for a very long answer – usually in 10s of decimal places.

Further security is provided because each subsequent transaction in the world, is built on the Hash of the previous block.

Modifying the data of the previous block (EG to say I didn’t spend 1,000 BTC so I can keep them, after buying something), even by one bit, completely changes the Hash used as a solution to the transaction, and the source of all subsequent data puzzles for all other transactions.

So basically trying to reverse a payment requires you to re-write every transaction ever made worldwide. Hence mathematically impossible.

This is so expensive in terms of CPU power (taking millions of computers) that using just a fraction of that CPU power to legitimately solve Hash algorithms (mine) is far more profitable (and also legal)


BitCoin uses the SHA-256 hash algorithm to generate verifiably "random" numbers in a way that requires a predictable amount of CPU effort.
SW725
Member
**
Offline Offline

Activity: 81
Merit: 10


View Profile
October 08, 2014, 12:50:26 PM
 #8

How Bitcoin Works Under the Hood [youtube]
http://www.youtube.com/watch?v=Lx9zgZCMqXE

Cool video.. Smiley Saved it in my phone.
BladerunnerB26354 (OP)
Newbie
*
Offline Offline

Activity: 20
Merit: 0


View Profile
October 08, 2014, 01:07:50 PM
 #9

How Bitcoin Works Under the Hood [youtube]
http://www.youtube.com/watch?v=Lx9zgZCMqXE

Yeah, very cool video, clarifies a lot, thank you !
DannyHamilton
Legendary
*
Offline Offline

Activity: 3430
Merit: 4659



View Profile
October 08, 2014, 01:31:41 PM
 #10

Thanks for the links guys, will read now.

Here is my current understanding, by the way Smiley

The block chain is the main innovation of Bitcoin. Every transaction you make with a Bitcoin, adds a block – a copy of this ledger, to every BTC in existence.

It is clear that you have a LOT to learn about bitcoin, and not just about cryptography.

A block is a collection of one or more transactions. Creating a transaction does not add a "block" to the blockchain.  Miners add blocks to the blockchain by grouping together some transactions, creating a header, and performing a proof-of-work on the header.

A block chain is a transaction legder. A full copy of a currency's block chain contains every transaction ever executed in every Bitcoin in the currency.

Ok, now you're on the right track.  This is basically correct. It would be more correct to say that a full copy of the blockchain contains every confirmed transaction ever executed in that cryptocurrency. Unconfirmed transactions are not yet in the blockchain.

When you want to spend a BTC, the system uses asymmetric cryptography – where you have both a public key (like a PO Box) and a private key – a signature to say you authorise spending of that BTC (like a key to the PO Box).

I've heard the PO BOX analogy before.  It isn't horrible for a very high level description, but it can cause confusion when someone doesn't let go of the analogy as they try to understand the protocol at a detailed level.

When you spend a BTC, the BTC network generates a mathematical puzzle to solve, in order to approve & add that transaction to the Block chain. This puzzle is so difficult, it takes the worldwide network an average of 10 minutes to solve – so it is mathematically impossible for one person (or group) to fraudulently create transactions.

The large data puzzle might be “find the integer square root of 2.16 to power of 37”.

Ok, now you are straying off a bit.

When you spend some BTC, the transaction is relayed peer to peer until eventually nearly the whole network is aware of the transaction. When miners (which are working on a proof of work for the block of transactions that they are currently attempting to add to the blockchain) hear about your transaction they add your transaction to the pool of transactions that they can choose from for their blocks.  Eventually some miners include your transaction in a block that they are working on.  If any of those miners are the first to solve the proof of work, then their block (with your transaction) is added to the blockchain.

The "mathematical puzzle" is not difficult, it is just time consuming. As an analogy, imagine that I give you two hundred 6-sided dice, and ask you to continually roll them all together until you roll at least fifty sixes in a single roll.  This isn't a "difficult" puzzle, but it will take you a while to accomplish.  Most of your rolls will have about thirty-three sixes.  Some will have less, and some will have more.  Now imagine a group of people all doing the same thing as you.  You are all racing to see who can roll fifty sixes first.  Obviously the faster an individual rolls their dice, the more likely they will be to get lucky (since they'll have more attempts than others).  This is similar to an individual miner having more hash power than others.  Also, as more people participate in the contest, it becomes more likely that someone, somewhere, will succeed in rolling fifty sixes.  This is similar to more people getting involved in mining in the world.

In Bitcoin, instead of dice, the miners are calculating a SHA-256 hash.  The results of a SHA256 hash are always the same for a given input, but unpredictable until it has been computed. Since the result is unpredictable, calculating the hashes is a bit like rolling dice. To set the "difficulty", the protocol requires that the result of the SHA256 hash be lower than some value.  If it isn't, then the input is adjusted, and the hash is calculated again.  This is repeated by all miners globally (each with their own inputs) until someone, somewhere, finds a hash that has a value lower than the current target.  

The protocol adjusts the "difficulty" (the number of sixes that must be rolled in our analogy) based on how quickly the previous 2016 solutions were found.  If it took more than 20160 minutes (average of 10 minutes per block) then the blocks took more than 10 minutes each, so the "puzzle" is too difficult. The protocol reduces the "difficulty" so that the blocks will be solved faster by setting a higher value target. In our analogy, this would be like reducing the number of sixes that must be rolled to "win".  If it took less than 20160 minutes then the blocks took less than 10 minutes each, so the "puzzle" isn't difficult enough.  The protocol increases the "difficulty" so that the blocks will be solved slower by setting a lower value target. In our analogy, this would be like increasing the number of sixes  that must be rolled to "win".

The solution to this is called a Hash, which basically means short hand for a very long answer – usually in 10s of decimal places.

No.  A hash is a particular and well defined mathematical process.  A hash is essentially a "digest" or "shortened representation" of the input.

An example of a really weak hash would be "Add up all the digits, then repeatedly add up all the digits of the results until only a single digit remains" (lets call it the ADEMUP hash).

So, I could calculate the ADEMUP of 172538:
1 + 7 + 2 + 5 + 3 + 8 = 26
2 + 6 = 8

The ADEMUP of 172538 is 8.

Everyone in the world would get the exact same answer if they calcuated ADEMUP on 172538

Meanwhile, if I change the input to 172537:
1 + 7 + 2 + 5 + 3 + 7 = 25
2 + 5 = 7

The ADEMUP of 172537 is 7

This is a hash, but it isn't a very good one for cryptographic purposes.  The result is too predictable.  If I reduce the input by 1, then I reduce the output by 1.  If I wanted to generate an ADEMUP of 1, it is clear that all I have to do is subtract 5 from the 172538 input.  A cryptographically useful hash will have a result that, while repeatable for any given input, is unpredictable until you've actually calculated it.  Bitcoin uses the SHA256 hash, which is well defined set of binary calculations on a value.  If you are familiar with how to calculate the following on the bits of a value: OR, AND, XOR then you can calculate SHA256.

Further security is provided because each subsequent transaction in the world, is built on the Hash of the previous block.

You are getting transactions and blocks mixed up.  Transactions are built on the output of a previous transaction.  Blocks are built on the hash of a previous block.

Modifying the data of the previous block (EG to say I didn’t spend 1,000 BTC so I can keep them, after buying something), even by one bit, completely changes the Hash used as a solution to the transaction, and the source of all subsequent data puzzles for all other transactions.

Again you are confusing transactions and blocks.  A block is a "block of transactions".  In other words a group of one or more transactions.  Since the transactions of a block are used as part of the input when solving the hash of the block, modifying a transaction changes the input for that block.  Changing the input of the block, completely changes the hash used as the solution to the block.  Since the hash solution of each block is used as part of the input to the next block, completely changing the hash used as the solution to a block completely changes the input when solving the hash of the next block.  Therefore, it becomes necessary to re-solve the block that includes the transaction that you are trying to modify AND all subsequent blocks until you get caught up with the number of blocks that the rest of the world sees as the "current blockchain".  


So basically trying to reverse a payment requires you to re-write every transaction ever made worldwide. Hence mathematically impossible.

Again, getting mixed up between blocks and transactions.

Trying to reverse a confirmed payment (a payment that is in a block) requires you to re-write every block solved after the one you are trying to modify.

This is so expensive in terms of CPU power (taking millions of computers) that using just a fraction of that CPU power to legitimately solve Hash algorithms (mine) is far more profitable (and also legal)

This is generally true, but it depends on how large the transaction is that you are trying to adjust and how many blocks have been solved since that transaction was included in a block.  This is why it is recommended that users wait for multiple confirmations on larger value transactions.  Each "confirmation" just means "another block added to the blockchain after your transaction".  The more blocks, the more expensive it is to have any chance of catching up with the global network.

BitCoin uses the SHA-256 hash algorithm to generate verifiably "random" numbers in a way that requires a predictable amount of CPU effort.

Correct.  Using the data from the header of the block as input, and adjusting a value in the header called a "nonce" (a value that exists only for the purposes of being adjusted so that the input to the SHA256 can be varied), Bitcoin uses SHA-256 to generate "random" numbers and sets a target value that the result of the SHA-256 hash must be less than to qualify as a "solution".  By adjusting the target value, Bitcoin can adjust the amount of hashes (on average) that must be calculated before a low enough value is likely to be found.  Because it is extremely fast and easy for a computer to calculate a single SHA-256 value, it is easy for all peers on the entire Bitcoin network to quickly validate that a "solution" that is broadcast is correct.
hayek
Sr. Member
****
Offline Offline

Activity: 370
Merit: 250


View Profile
October 08, 2014, 03:29:40 PM
 #11

In a nutshell:

The Bitcoin Network is a large network of private accountants competing for your business. Bitcoin makes them play an astronomical guessing game to decide who "wins" your business. The winning accountant records a page in a transparent, open ledger. On the page all of the transactions between now and the last page are recorded. The accountant is awarded a sum of bitcoins for doing this work.

You interface with the Network using keys. These keys are very large numbers, so large the world's computers cannot count them all even in thousands of years, probably millions. This makes it difficult to brute force. In fact, there are more possible keys than there are atoms in the universe. Keys come in pairs, a private and a public key. Data can be "locked" - the bits are transformed in such a way using the private or public key to make it unreadable. If the data is locked with the private key it can be unlocked with the public key.

You public key is further transformed in to an address. When someone sends bitcoins they are created a transaction announcement to be sent to all of the accountants on the network. The transaction contains instructions for transferring your balance to a Bitcoin address. In the transaction you supply 'receipts' that prove your balance and the accountant verifies the validity of the receipts before recording the transaction in the ledger.

In this metaphor the blockchain is the ledger. Blocks are the pages in the ledger. Accountants are miners and the instructions for transferring coins are transactions. Your key pairs are like your passwords that lock/unlock your bitcoins. There really is no such thing as a "bitcoin" it's just a unit of measurement for the accounting ledger. Bitcoin doesn't actually secure files that contain coins. The network works like Napster but for 1 very large file - the block chain. The contents of that file are maintained by all the computers on the network. So long as the network is decentralized making illicit changes to the block chain is impossible. That's one of the main places Bitcoin gets it's value. The cryptography achieves decentralized consensus. Not perfectly but it's the best so far.
BladerunnerB26354 (OP)
Newbie
*
Offline Offline

Activity: 20
Merit: 0


View Profile
October 08, 2014, 03:40:31 PM
 #12

Many thanks Danny and Hayek for your detailed responses, they are very helpful Smiley)
DannyHamilton
Legendary
*
Offline Offline

Activity: 3430
Merit: 4659



View Profile
October 08, 2014, 03:46:08 PM
 #13

On the page all of the transactions between now and the last page are recorded. The accountant is awarded a sum of bitcoins for doing this work.

Actually, in this analogy the "accountant" gets to chose which of the transactions are recorded on the page.  They might choose to record all the transactions that they've seen since the previous page was recorded, but they also might choose to only record a subset of those transactions.

there are more possible keys than there are atoms in the universe.

Based on current estimates of the numbers of atoms in the observable universe, this is not true. However, your point that the number of possible keys is astronomically large is accurate.

Keys come in pairs, a private and a public key. Data can be "locked" - the bits are transformed in such a way using the private or public key to make it unreadable. If the data is locked with the private key it can be unlocked with the public key.

This is not correct.  The keys used by bitcoin are digital signature keys.  They are not encryption keys.  They are used to create and verify signatures, not to "lock" or "unlock" data.

You public key is further transformed in to an address. When someone sends bitcoins they are created a transaction announcement to be sent to all of the accountants on the network. The transaction contains instructions for transferring your balance to a Bitcoin address. In the transaction you supply 'receipts' that prove your balance and the accountant verifies the validity of the receipts before recording the transaction in the ledger.

This is a reasonable way to look at it at a high level.  If you decide to learn more about the specific details of how bitcoins works, then it is important to understand that addresses don't exist at the protocol level, and that you aren't actually "sending a balance to an address", but rather "associating an output with a digital signature requirement".
remotemass
Legendary
*
Offline Offline

Activity: 1119
Merit: 1017


ASMR El Salvador


View Profile WWW
October 08, 2014, 07:18:20 PM
Last edit: October 12, 2014, 05:19:08 PM by remotemass
 #14

You may also find it worth viewing this video:
United Colors of Bitcoin
http://www.youtube.com/watch?v=p6sOFXHlhuE

{ Imagine a sequence of bits generated from the first decimal place of the square roots of whole integers that are irrational numbers. If the decimal falls between 0 and 5, it's considered bit 0, and if it falls between 5 and 10, it's considered bit 1. This sequence from a simple integer count of contiguous irrationals and their logical decimal expansion of the first decimal place is called the 'main irrational stream.' Our goal is to design a physical and optical computing system system that can detect when this stream starts matching a specific pattern of a given size of bits. bitcointalk.org/index.php?topic=166760.0 } Satoshi did use a friend class in C++ and put a comment on the code saying: "This is why people hate C++".
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!