Bitcoin Forum
May 12, 2024, 07:06:33 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: SCIP POW  (Read 973 times)
gmaxwell (OP)
Moderator
Legendary
*
expert
Offline Offline

Activity: 4172
Merit: 8419



View Profile WWW
August 28, 2013, 06:00:57 PM
 #1

Split from the CoinWitness

(And as said we've not talked about SCIP-based
productive proof-of-work yet...)
I don't think this is very interesting, beyond aligning the POW to some other processing which is also useful to Bitcoin. Our proof of work is already productive: It secures Bitcoin. I am currently shaking my fist at your comment promoting the misunderstanding that our work isn't useful.

POW is generally the same up to some constant factors. It all provably expends energy in order to force the miners to choose a unique history to support instead of greedily supporting multiple chain-heads.

Having secondary uses of the work is not obvious adventitious for the system: It may dilute the motivation to participate honestly, if you try to mine on a fork you would at least still conserve the value of this other work, instead of wasting your effort entirely.

As far as using SCIP for this, you're talking about a prover overhead of thousands of times slowdown. This is unlikely to keep your useful work useful. Also, because of the non-determinstic input necessary in any SCIP like system which is either succinct proofs or zero-knoweldge almost certainly means that a single program execution run can be fuzzed into an infinite number of POW hashes, so even using SCIP evaluation of your function can't guarantee non-trivial amounts of your desired work is getting done.

If you wan to wax philosophic about alternative POW, ones that create proofs that the miner isn't just some blind remote computing service and actually knows what they're validating (e.g. memory hard proofs over UTXO queries) are probably more interesting than arbitrary functions.
1715497593
Hero Member
*
Offline Offline

Posts: 1715497593

View Profile Personal Message (Offline)

Ignore
1715497593
Reply with quote  #2

1715497593
Report to moderator
1715497593
Hero Member
*
Offline Offline

Posts: 1715497593

View Profile Personal Message (Offline)

Ignore
1715497593
Reply with quote  #2

1715497593
Report to moderator
1715497593
Hero Member
*
Offline Offline

Posts: 1715497593

View Profile Personal Message (Offline)

Ignore
1715497593
Reply with quote  #2

1715497593
Report to moderator
Even if you use Bitcoin through Tor, the way transactions are handled by the network makes anonymity difficult to achieve. Do not expect your transactions to be anonymous unless you really know what you're doing.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715497593
Hero Member
*
Offline Offline

Posts: 1715497593

View Profile Personal Message (Offline)

Ignore
1715497593
Reply with quote  #2

1715497593
Report to moderator
1715497593
Hero Member
*
Offline Offline

Posts: 1715497593

View Profile Personal Message (Offline)

Ignore
1715497593
Reply with quote  #2

1715497593
Report to moderator
r3wt
Hero Member
*****
Offline Offline

Activity: 686
Merit: 504


always the student, never the master.


View Profile
August 28, 2013, 07:28:04 PM
 #2

+1. i agree with your point that POW as it is is already useful. also agree on the trivial nature of alternative proof of work schemes. your final point is a run on sentence and i didn't understand what you meant exactly, if you could elaborate a bit that would be great.

My negative trust rating is reflective of a personal vendetta by someone on default trust.
pmlyon
Member
**
Offline Offline

Activity: 72
Merit: 10


View Profile
August 28, 2013, 07:32:37 PM
 #3

I apologize if this is obvious, but I didn't find it on a search. What does SCIP stand for?

Author of BitSharp, a C# Bitcoin node
https://github.com/pmlyon/BitSharp/wiki
notme
Legendary
*
Offline Offline

Activity: 1904
Merit: 1002


View Profile
August 28, 2013, 11:07:46 PM
 #4

I apologize if this is obvious, but I didn't find it on a search. What does SCIP stand for?

From the first post of the thread linked in OP:
In SNARKs for C: Verifying Program Executions Succinctly and in Zero Knowledge (referred to as SCIP below), Eli Ben-Sasson et al. describe their work on highly efficient non-interactive proofs with zero-knowledge for the faithful execution of programs written in C. Eli also presented at the Bitcoin conference.

https://www.bitcoin.org/bitcoin.pdf
While no idea is perfect, some ideas are useful.
pmlyon
Member
**
Offline Offline

Activity: 72
Merit: 10


View Profile
August 29, 2013, 03:55:24 PM
 #5

...oops, good thing I apologized in advance. Wink Thanks!

Author of BitSharp, a C# Bitcoin node
https://github.com/pmlyon/BitSharp/wiki
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!