Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I know scrypt was designed to lessen the GPU/ASIC advantage.

We now have litecoin as a real-world example of this. However, it hasn't worked out perfectly. Most coins are mined by GPUs, although the advantage is probably smaller than it would have been with SHA-256.

I wonder how the future for scrypt and newer generations of this approach looks like:

  1. Are there alternatives being developed?
  2. Are there specific issues exposed by Litecoin that could be addressed?
share|improve this question
    
You mention ASIC, and the page you link to mentions "rise of specialized ASICs for Bitcoin"; is anything substantiating that claim? Or is ASIC used for FPGA (which is not an ASIC to me)? –  fgrieu Apr 18 '13 at 11:04
    
+fgrieu Yes, ASIC mining happens today, but whether it is done today or not isn't relevant to the question I think. bitcointalk.org/index.php?topic=178275.0 –  user239558 Apr 18 '13 at 19:02
1  
Ask Colin Percival? –  Roland Smith May 6 '13 at 18:48
    
One can simply adjust the memory use parameter of scrypt. Litecoin chose a really small amount of memory. It's also possible to design a new scheme that doesn't allow certain time-memory trade-offs the GPU implementation takes advantage of. –  CodesInChaos Jul 17 '13 at 6:40

1 Answer 1

up vote 1 down vote accepted

I believe scrypt is designed to be scaled to be both memory hard and cpu hard by explicit design.

As a result, most implementations of scrypt will require you to input a desired cpu difficulty as well as a desired memory difficulty. On a gpu, where each core has very little memory, it would be trivial to see that, unless gpus gain a great deal of memory in the near future, you can crank the memory difficulty up to the point where it will be barely tolerable for a cpu let alone a memory-light gpu core.

Simply, scrypt doesn't need to be improved, it just needs to be utilized in a manner that will achieve the desired results. Even if you look now, you will see that scrypt is doing a superb job at preventing a serious rise of hashing rate with the advent of the ability to use gpus as the rate is currently measured in kh/s per second rather than mh/s on the same devices.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.