Makwa sites [1] https://bitcointalk.org/index.php?topic=311000.0
Seems like they independently rediscovered it. Adam On 23 January 2018 at 05:54, Ondřej Vejpustek via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org> wrote: >> Yes, this scheme. >> https://bitcointalk.org/index.php?topic=311000.msg3342217#msg3342217 > > In addition to the scheme, I found out, that Makwa > (https://www.bolet.org/makwa/), a hashing function which received a > special recognition in the Password Hashing Competition, supports a > delegation. In fact, Makwa is similar to the suggested scheme. > > Unfortunately, both schemes have two drawbacks: > (1) There is no proof that the host computes what he's suppose to do. > (2) The delegation is far more slower than the normal computation. > According to the Makwa paper > (https://www.bolet.org/makwa/makwa-spec-20150422.pdf) the delegation is > typically 100 to 1000 slower. So I see little advantage in delegating. > > I doubt there is a scheme that suits our needs. > _______________________________________________ > bitcoin-dev mailing list > bitcoin-dev@lists.linuxfoundation.org > https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev _______________________________________________ bitcoin-dev mailing list bitcoin-dev@lists.linuxfoundation.org https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev