Pebbling and Proofs of Work

We investigate methods for providing easy-to-check proofs of computational effort. Originally intended for discouraging spam, the concept has wide applicability as a method for controlling denial of service attacks. Dwork, Goldberg, and Naor proposed a specific memory-bound function for this purpose and proved an asymptotically tight amortized lower bound on the number of memory accesses any polynomial time bounded adversary must make. Their function requires a large random table which, crucially, cannot be compressed. We answer an open question of Dwork et al. by designing a compact representation for the table. The paradox, compressing an incompressible table, is resolved by embedding a time/space tradeoff into the process for constructing the table from its representation.

• Type: Conference
• Year: 2005
• Where: CRYPTO
• Authors: Cynthia Dwork, Moni Naor, Hoeteck Wee
• Keywords: CRYPTO 2005, Large Random Table, Specific Memory-bound Function, Time Bounded Adversary