Pages:
Author

Topic: Cuckoo Cycle: a new memory-hard proof-of-work system - page 4. (Read 10894 times)

newbie
Activity: 14
Merit: 0
Yes my friend I hope you keep you eyes peeled and judge how many you believe you should invite to support for it to happen fast and yet secure...

I don't really care who does it in the end...It's just that If it has to be what it could be...It's value, has to completely outweigh the costs

I hope some people would like to take the responsibility of helping it happen...

Call everyone now...

I'm talking about honestCoins only
full member
Activity: 140
Merit: 107
I don't think so. it seems you can map-reduce the table, which is perfect for botnets.

"Bucketized versions of Cuckoo hashingcan achieve 95-99% occupancy, without any space overhead for pointers or other structures.

http://domino.research.ibm.com/library/cyberdig.nsf/papers/DF54E3545C82E8A585257222006FD9A2/$File/rc24100.pdf
newbie
Activity: 14
Merit: 0
We have three words for you:

Design by vision

Intuition

Steve              (For it to make a dent in the world I'll go crazy and one day fade away)


Would you like to join a different open source revolution...

We need developers... more than you know (like really these are the kind of no.s that are mixed and matched so there is no way or sufficient cause for

breaking the bank)

Openly Backed Bitcoin Governing Protocol


Design by encouraging empathy

Judgement

Gandhi


The revolution you believed was coming has already come it was a part of the Bitcoin puzzle...

To emit the right signs...you hide your communication in puzzles so It is harder to get to

therefore the intuitive...

those on the edge of intelligence can only understand the message...also it is only those on the sharp edge of intelligence that have any valuable information
hero member
Activity: 518
Merit: 521
Because it's too slow ?

And you'd get lots of stale blocks.. ?

no problem..  Grin

No you don't comprehend all the issues of the design of a coin.
hero member
Activity: 718
Merit: 545
Because it's too slow ?

And you'd get lots of stale blocks.. ?

no problem..  Grin
hero member
Activity: 518
Merit: 521
Cuckoo Cycle won't work as a cpu-only PoW.
hero member
Activity: 718
Merit: 545
Hi tromp,

Like the look of cuckoo.. Well done for coming up with it. Original work always gets an A+ in my book.

Sorry to ask for more -  Tongue - but is there any chance you could knock up a JAVA version ?

I would love to play around with it..


legendary
Activity: 990
Merit: 1108
Excellent suggestion. I'm interested in applying this as PBKDF to be used in full-wallet encryption. The idea is to require 256Mb of memory and 2-3 seconds of computation per password to greatly increase the cost of bruteforce comparing to PBKDF2, bcrypt and scrypt. How would you suggest doing that with Cuckoo?

I wouldn't base a PBKDF on Cuckoo, since you'd forego its best feature, namely trivial proof verifiabilty.

Are you preparing an entry for the Password Hashing Competition
at https://password-hashing.net/ ?
They also like candidates to have a limited amount of parallelizability, so that a multicore server
could use multiple cores to compute it. This is hard to arrange with Cuckoo.

Still, if you must use Cuckoo, you could use a size of 2^25, which uses 128MB,
and takes about 5s to run on a 3.2Ghz intel i5 with sha256 replaced by siphash
(which may well become permanent) and the default easiness setting.
The output could be sha256 applied to the sequence of all writes to the cuckoo array
(including the path reversals).

legendary
Activity: 4410
Merit: 4788
yet another waste of resources........

so much of a waste i wont even rant to explain why
full member
Activity: 200
Merit: 104
Software design and user experience.
Excellent suggestion. I'm interested in applying this as PBKDF to be used in full-wallet encryption. The idea is to require 256Mb of memory and 2-3 seconds of computation per password to greatly increase the cost of bruteforce comparing to PBKDF2, bcrypt and scrypt. How would you suggest doing that with Cuckoo?
newbie
Activity: 10
Merit: 0
perfect timing as the Scrypt ASICs are getting better and better
legendary
Activity: 1937
Merit: 1001
POS is the future!




For all future scam coins, yea I absolutely agree.

legendary
Activity: 990
Merit: 1108
POS is the future!

I think both PoW and PoS have their place in the future.
PoW is useful in the startup phase to establish a sufficiently large
base of coins that can later be leveraged by PoS.

But as far as PoW go, Cuckoo Cycle has some very distinct advantages over hashcash-scrypt.

Both were designed not to be easily parallellizable. But computing a single scrypt is as demanding
on the prover as it is on the verifier, which means we cannot just make the prover's work harder
(i.e. use more memory) without also making life (too) hard on the verifier, i.e. every client.

Cuckoo cycle on the other hand has trivially verifiable proofs, while you can make the prover
use up to 14GB of memory and spend many minutes even at the lowest diffculty setting.

newbie
Activity: 18
Merit: 0
POS is the future!
legendary
Activity: 990
Merit: 1108
I finished designing and implementing a new memory-hard proof-of-work system
based on Cuckoo Hashtables.

A preliminary version of the whitepaper is available online at
https://github.com/tromp/cuckoo/blob/master/cuckoo.pdf

Please have a look!



Pages:
Jump to: