The Unreasonable Fundamental Incertitudes Behind Bitcoin Mining
Open accessAbstract
Bitcoin is a "crypto currency", a decentralized electronic payment scheme based on cryptography which has recently gained excessive popularity. Scientific research on bitcoin is less abundant. A paper at Financial Cryptography 2012 conference explains that it is a system which "uses no fancy cryptography", and is "by no means perfect". It depends on a well-known cryptographic standard SHA-256. In this paper we revisit the cryptographic process which allows one to make money by producing bitcoins. We reformulate this problem as a Constrained Input Small Output (CISO) hashing problem and reduce the problem to a pure block cipher problem. We estimate the speed of this process and we show that the cost of this process is less than it seems and it depends on a certain cryptographic constant which we estimated to be at most 1.86. These optimizations enable bitcoin miners to save tens of millions of dollars per year in electricity bills. Miners who set up mining operations face many economic incertitudes such as high volatility. In this paper we point out that there are fundamental incertitudes which depend very strongly on the bitcoin specification. The energy efficiency of bitcoin miners have already been improved by a factor of about 10,000, and we claim that further improvements are inevitable. Better technology is bound to be invented, would it be quantum miners. More importantly, the specification is likely to change. A major change have been proposed in May 2013 at Bitcoin conference in San Diego by Dan Kaminsky. However, any sort of change could be flatly rejected by the community which have heavily invested in mining with the current technology. Another question is the reward halving scheme in bitcoin. The current bitcoin specification mandates a strong 4-year cyclic property. We find this property totally unreasonable and harmful and explain why and how it needs to be changed.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Bitcoin: A Peer-to-Peer Electronic Cash SystemPreprint
Nakamoto, S. (2019) · SSRN Electronic Journal · doi:10.2139/ssrn.3440802 · Cited by 14,600 · cited 5× · see citing works
“It was NOT proposed in the original paper of 2008 cf. [51] which simply says that any needed rules and incentives can be enforced .”
BackgroundInfluentialBlagg, L. (2002) · Brain & development (Tokyo. 1979) · doi:10.1016/s0387-7604(02)00215-2 · Cited by 1,786
Pricing via processing or combatting junk mail
Dwork, C., & Naor, M. (2007) · Lecture Notes in Computer Science · doi:10.1007/3-540-48071-4_10 · Cited by 1,282 · see citing works
Quantitative Analysis of the Full Bitcoin Transaction Graph
Ron, D., & Shamir, A. (2013) · Lecture Notes in Computer Science · doi:10.1007/978-3-642-39884-1_2 · Cited by 1,019 · see citing works
Bitter to Better - How to Make Bitcoin a Better Currency
Barber, S., Boyen, X., Shi, E., & Uzun, E. (2012) · Financial Cryptography · doi:10.1007/978-3-642-32946-3_29 · Cited by 627 · cited 4× · see citing works
“Ideally we would like to see if bitcoin is secure and what kind of attacks are possible against bitcoin, and maybe how it can be improved, cf. [4].”
BackgroundInfluentialBriscoe, B., Odlyzko, A., & Tilly, B. (2006) · IEEE spectrum · doi:10.1109/mspec.2006.1653003 · Cited by 235 · see citing works
A Case Against Currently Used Hash Functions in RFID Protocols
Feldhofer, M., & Rechberger, C. (2006) · Lecture Notes in Computer Science · doi:10.1007/11915034_61 · Cited by 205 · cited 1× · see citing works
“The goal of this paper is NOT to describe the best possible ASIC implementation of SHA256 and what is the best compromise between the circuit area/propagation time, see [21, 27, 28, 34, 37, 40–43, 48, 55, 56].”
MethodAlgebraic Cryptanalysis of the Data Encryption Standard
Courtois, N. T., & Bard, G. V. (2007) · Springer eBooks · doi:10.1007/978-3-540-77272-9_10 · Cited by 189 · cited 3× · see citing works
“Related Search: One could also try to solve this problem by formal coding and “a software algebraic attack”, see [24, 45, 52].”
BackgroundSelf-citationLogic Minimization Techniques with Applications to Cryptology
Boyar, J., Matthews, P., & Peralta, R. (2013) · Journal of Cryptology · doi:10.1007/s00145-012-9124-7 · Cited by 173 · see citing works
Preimages for Step-Reduced SHA-2
Aoki, K., Guo, J., Matusiewicz, K., Sasaki, Y., & Wang, L. (2009) · IACR Cryptology ePrint Archive · doi:10.1007/978-3-642-10366-7_34 · Cited by 133 · cited 1× · see citing works
“We use vere similar notations and graphical conventions as the leading experts of SHA-256 in the cryptographic literature, see for example [34, 39].”
MethodImproving SHA-2 Hardware Implementations
Chaves, R., Kuzmanov, G., Sousa, L., & Vassiliadis, S. (2006) · Workshop on Cryptographic Hardware and Embedded Systems · doi:10.1007/11894063_24 · Cited by 109
On the hardware implementations of the SHA-2 (256, 384, 512) hash functions
Sklavos, N., & Koufopavlou, O. (2003) · Proceedings of the 2003 International Symposium on Circuits and Systems, 2003. ISCAS '03. · doi:10.1109/iscas.2003.1206214 · Cited by 100 · cited 1×
“The goal of this paper is NOT to describe the best possible ASIC implementation of SHA256 and what is the best compromise between the circuit area/propagation time, see [21, 27, 28, 34, 37, 40–43, 48, 55, 56].”
MethodThe design of a high speed ASIC unit for the hash function SHA-256 (384, 512)
Dadda, L., Macchetti, M., & Owen, J. (2004) · Proceedings Design, Automation and Test in Europe Conference and Exhibition · doi:10.1109/date.2004.1269207 · Cited by 71 · cited 1× · see citing works
“The goal of this paper is NOT to describe the best possible ASIC implementation of SHA256 and what is the best compromise between the circuit area/propagation time, see [21, 27, 28, 34, 37, 40–43, 48, 55, 56].”
MethodMacchetti, M., & Dadda, L. (2005) · IEEE Symposium on Computer Arithmetic · doi:10.1109/arith.2005.36 · Cited by 41
Efficient Hardware Architecture of SHA-256 Algorithm for Trusted Mobile Computing
Kim, M., Ryou, J., & Jun, S.-I. (2009) · Conference on Information Security and Cryptology · doi:10.1007/978-3-642-01440-6_19 · Cited by 35 · cited 1×
“The goal of this paper is NOT to describe the best possible ASIC implementation of SHA256 and what is the best compromise between the circuit area/propagation time, see [21, 27, 28, 34, 37, 40–43, 48, 55, 56].”
MethodLee, Y.-K., Chan, H., & Verbauwhede, I. (2007) · Web Information System and Application Conference · doi:10.1007/978-3-540-77535-5_8 · Cited by 35
Aron, J. (2014) · doi:10.1016/s0262-4079(14)60271-2 · Cited by 7
Ultra high speed SHA-256 hashing cryptographic module for IPSec hardware/software codesign
Michail, H., Athanasiou, G., Kritikakou, A., Goutis, C., Gregoriades, A., & Papadopoulou, V. (2010) · International Conference on Security and Cryptography · doi:10.5220/0002991403090313 · Cited by 7
Black-box collision attacks on the compression function of the GOST Hash function
Courtois, N., & Mourouzis, T. (2011) · Proceedings of the International Conference on Security and Cryptography · doi:10.5220/0003525103250332 · Cited by 5
Self-citation
Flagged first, then by citations
48 of the 67 references couldn’t be matched to a known paper.
Research works printed but not linked: 11
- [19]19. Bob Briscoe, Andrew Odlyzko and Benjamin Tilly: 'Metcalfe's Law is Wrong, In IEEE Spectrum, July 2006.
- [22]22. Nicolas T. Courtois, Daniel Hulme and Theodosis Mourouzis: Solving Circuit Optimisation Problems in Cryptography and Cryptanalysis, In (informal) proceedings of SHARCS 2012 workshop, pp. 179-191, http://2012.sharcs.org/record.pdf . An abridged version appears in the electronic proceedings of the 2nd IMA conference Mathematics in Defence 2011, UK.
- [23]23. Nicolas T. Courtois, Daniel Hulme and Theodosis Mourouzis: Multiplicative Complexity and Solving Generalized Brent Equations With SAT Solvers, In COMPUTATION TOOLS 2012, The Third International Conference on Computational Logics, Algebras, Programming, Tools, and Benchmarking, July 22-27, 2012 - Nice, France. Published in IARIA conference web proceedings. ISBN 978-1-61208-222-6, pp. 2227, (c) IARIA 2012, 22 July 2012, http://www.thinkmind.org/index.php?view= article&articleid=computation\_tools\_2012\_1\_40\_80034 . Best paper award.
- [27]27. Luigi Dadda, Marco Macchetti, and Jeff Owen: An ASIC design for a high speed implementation of the hash function SHA-256 384, 512, ACM Great Lakes Symposium on VLSI, pp. 421-425. ACM, 2004.
- [30]30. Mining digital gold, From the print edition: Finance and economics, The Economist, 13 April 2013.
- [31]31. Ittay Eyal, Emin Gun Sirer: Majority is not Enough: Bitcoin Mining is Vulnerable, http://arxiv.org/abs/1311.0243 , 4 Nov 2013. · arXiv
- [37]37. Miroslav Knezevic: Efficient Hardware Implementations of Cryptographic Primitives, PhD thesis, Katholieke Universiteit Leuven, 2011
- [43]43. Harris E. Michail, George S. Athanasiou, Andreas A. Gregoriades, Ch. L. Panagiotou, Costas E. Goutis: High Throughput Hardware/Software Co-design Approach SHA-256 Hashing Cryptographic Module, Global Journal of Computer Science and Technology, Vol 10,4: 15, 2010.
- [47]47. Dan Kaminiski et al , Security Panel at Bitcoin 2013 Conference, see in particular minutes 40-42, http://www.youtube.com/watch?v=si-2niFDgtI
- [53]53. ˇ Surda Peter: Economics of Bitcoin: is Bitcoin an alternative to fiat currencies and gold?, Diploma thesis submitted at WU Vienna University of Economics and
- [56]56. Stefan Tillich, Martin Feldhofer, Mario Kirschbaum, Thomas Plos, JornMarc Schmidt and Alexander Szekely: Uniform Evaluation of Hardware Implementations of the Round-Two SHA-3 Candidates, In Second SHA3 Conference, http://csrc.nist.gov/groups/ST/hash/sha-3/Round2/Aug2010/ documents/papers/TILLICH\_sha3hw.pdf
Cited by
Sorted by citations
Bitcoin and beyond: a technical survey on decentralized digital currencies
Tschorsch, F., & Scheuermann, B. (2016) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2016.2535718 · Cited by 1,690 · see citing works
“Recent observations and optimizations [209], [210] will probably continue to push the hash rates even higher in the future.”
BackgroundA Survey on Security and Privacy Issues of Bitcoin
Conti, M., Sandeep Kumar, E., Lal, C., & Ruj, S. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2842460 · Cited by 1,116 · see citing works
“cryptographic math puzzle [16], and it imposes a high level of computational cost on the transaction verification process, thus the verification will be dependent on the computing power of a miner, instead of the number of (possibly virtual) identities.”
BackgroundBanking on Blockchain: Costs Savings Thanks to the Blockchain Technology
Cocco, L., Pinna, A., & Marchesi, M. (2017) · Future Internet · doi:10.3390/fi9030025 · Cited by 272 · see citing works
“Results similar to those by Czarnek for the Bitcoin system emerge also from other works, such as that by [25], who simulate an artificial Bitcoin market, and that by [37], who wrote: “In April 2013 it was estimated that Bitcoin miners already used about 982 Megawatt hours every day.”
MethodOn Subversive Miner Strategies and Block Withholding Attack in Bitcoin Digital CurrencyPreprint
Courtois, N., & Bahack, L. (2014) · arXiv.org · doi:10.48550/arxiv.1402.1718 · Cited by 234 · see citing works
“However since the publication of [8] the playing ground has been somewhat leveled.”
BackgroundInfluentialSelf-citationOptimizing SHA256 in Bitcoin Mining
Courtois, N., Grajek, M., & Naik, R. (2014) · International Conference on Cryptography and Security Systems · doi:10.1007/978-3-662-44893-9_12 · Cited by 92 · see citing works
Self-citationBlockchains and Bitcoin: Regulatory responses to cryptocurrencies
Guadamuz, A., & Marsden, C. T. (2015) · First Monday · doi:10.5210/fm.v20i12.6198 · Cited by 87 · see citing works
Cryptocurrencies in Modern Finance: A Literature Review
Rejeb, A., Rejeb, K., & Keogh, J. G. (2021) · ETIKONOMI · doi:10.15408/etk.v20i1.16911 · Cited by 108 · see citing works
“In the cryptocurrency financial system, users can gain value by engaging in particular transactions with other users (e.g., sale of products) or by mining (Courtois et al., 2014; Hayes, 2015; Lim et al., 2014).”
BackgroundModeling and Simulation of the Economics of Mining in the Bitcoin Market
Cocco, L., & Marchesi, M. (2016) · PLoS ONE · doi:10.1371/journal.pone.0164603 · Cited by 78 · see citing works
Derks, J., Gordijn, J., & Siegmann, A. (2016) · Electronic Markets · doi:10.1007/s12525-018-0308-3 · Cited by 53 · see citing works
“There are several ways to implement a consensus mechanism, and for bitcoin the chosen mechanism for validation of the bitcoin transactions occurs by an activity called ‘proof-ofwork’, which is executed by miners (Courtois and Bahack 2014; Courtois et al. 2013).”
On The Longest Chain Rule and Programmed Self-Destruction of Crypto CurrenciesPreprint
Courtois, N. (2014) · arXiv.org · doi:10.48550/arxiv.1405.0534 · Cited by 47 · see citing works
Self-citationPeters, G., Chapelle, A., & Panayi, E. (2014) · Journal of Banking Regulation · doi:10.1057/jbr.2015.10 · Cited by 34 · see citing works
Bitcoin: a Money-like Informational CommodityPreprint
Bergstra, J., & Weijland, W. (2014) · arXiv.org · doi:10.48550/arxiv.1402.4778 · Cited by 32 · see citing works
“In [15] a critique of the design of Bitcoin mining is given.”
Vilim, M., Duwe, H., & Kumar, R. (2016) · Design Automation Conference · doi:10.1145/2897937.2897988 · Cited by 28
“[5] who explore mining optimizations from an algorithmic perspective.”
BackgroundCould Bitcoin transactions be 100x faster?
Courtois, N., Emirdag, P., & Nagy, D. (2014) · International Conference on Security and Cryptography · doi:10.5220/0005102804260431 · Cited by 26 · see citing works
Self-citationBitcoin and Beyond: Exclusively Informational Monies
Bergstra, J., & de Leeuw, K. (2013) · arXiv.org · doi:10.48550/arxiv.1304.4758 · Cited by 26
“(16)Important aspects of mining can be found in [23].”
BackgroundCryptojacking injection: A paradigm shift to cryptocurrency-based web-centric internet attacks
Zimba, A., Wang, Z.-S., & Mulenga, M. (2019) · Journal of Organizational Computing and Electronic Commerce · doi:10.1080/10919392.2019.1552747 · Cited by 23
“The computations are resource-intensive thus requiring specialized processors such as GPU, FPGA, ASIC etc. General computers would take hundreds of years to generate certain crypto currencies (Courtois, Grajek, and Naik 2013).”
BackgroundQuestions related to Bitcoin and other Informational MoneyPreprint
Bergstra, J., & de Leeuw, K. (2013) · arXiv.org · doi:10.48550/arxiv.1305.5956 · Cited by 20 · see citing works
“A recent description, and critique of Bitcoin mining can be found in [25].”
BackgroundWhat Drives People’s Cryptocurrency Investment Behavior
Wang, Y., Duong, N. T., Ying, C.-H., & Chang, Y.-C. (2024) · Journal of Computer Information Systems · doi:10.1080/08874417.2024.2329127 · Cited by 11 · see citing works
Economics of Open-Source Solar Photovoltaic Powered Cryptocurrency Mining
McDonald, M., Hayibo, K. S., Hafting, F. K., & Pearce, J. (2023) · Ledger · doi:10.2139/ssrn.4205879 · Cited by 17
Fabus, J., Kremenova, I., Stalmasekova, N., & Kvasnicova-Galovicova, T. (2024) · Journal of Risk and Financial Management · doi:10.3390/jrfm17060229 · Cited by 14 · see citing works
“The results of research work by Curtois et al. (Courtois et al. 2013) about the reward-halving scheme in Bitcoin, consider that the current Bitcoin specification mandates a strong 4-year cyclic property, and they find this property totally unreasonable and harmful and explain why and how it needs…”
ResultBlockchain Networks as Adaptive Systems
Liaskos, S., Wang, B., & Alimohammadi, N. (2019) · International Symposium on Software Engineering for Adaptive and Self-Managing Systems · doi:10.1109/seams.2019.00025 · Cited by 10 · see citing works
Crypto Currency Regulation and Law Enforcement PerspectivesPreprint
Courtois, N., Gradoń, K., & Schmeh, K. (2021) · arXiv.org · doi:10.48550/arxiv.2109.01047 · Cited by 8 · see citing works
Self-citationA Survey on Attacks of Bitcoin
Joshi, J., & Mathew, R. (2018) · Lecture Notes on Data Engineering and Communications Technologies · doi:10.1007/978-3-030-24643-3_113 · Cited by 8 · see citing works
On detection of bitcoin mining redirection attacks
Courtois, N., Emirdag, P., & Wang, Z. (2015) · International Conference on Information Systems Security and Privacy · doi:10.5220/0005245600980105 · Cited by 7
Self-citationDistributed Ledger Privacy: Ring Signatures, Möbius and CryptoNote
Clack, C., & Courtois, N. (2019) · arXiv.org · doi:10.48550/arxiv.1902.02609 · Cited by 4
“– Most hash functions similar to SHA-256 have already been broken by the academic research community, and since SHA-256 is less studied it is less well understood and it cannot be assumed to be more secure [20].”
BackgroundSelf-citationPachal, S., & Ruj, S. (2019) · International Conference on Communication Systems and Networks · doi:10.1109/comsnets.2019.8711445 · Cited by 4 · see citing works
“Proof-of-Work consists of cryptographic puzzle [6].”
Valuation of Crypto-Currency Mining Operations
Berengueres, J. (2018) · Ledger · doi:10.5195/ledger.2018.123 · Cited by 3
Analysis of Tainted Transactions in the Bitcoin Blockchain Transaction Network
Óskarsdóttir, M., Mallett, J., Arnarson, A., & Stefánsson, A. S. (2020) · International Workshop on Complex Networks & Their Applications · doi:10.1007/978-3-030-65351-4_46 · Cited by 2 · see citing works
Smart Timing for Mining: A Deep Learning Framework for Bitcoin Hardware ROI Prediction
Wickramasinghe, S., Das, B., & Herremans, D. (2025) · arXiv.org · doi:10.48550/arxiv.2512.05402 · Cited by 1
“At the heart of Bitcoin’s security lies mining, the computational process through which new coins are issued while validating transactions and securing the distributed ledger (Nakamoto, 2008; Courtois et al., 2013).”
A Note on the Non-proportionality of Winning Probabilities in Bitcoin
Parra-Moyano, J., Reich, G., & Schmedders, K. (2023) · Computational Economics · doi:10.1007/s10614-023-10503-2 · Cited by 1 · see citing works
“A block’s header has a size of 80 bytes (Antonopoulos, 2014) and, as explained by Courtois et al. (2014), contains the following information: The version number of the protocol (with a size of 4 bytes); the hash of the previous block’s header (with a size of 32 bytes); the Merkle root (with a size…”
Blockchain Technologies Fundamentals - Perceptions, Principles, Procedures and Practices
Madakam, S., & Kollu, S. (2019) · Prajnan: Journal of Banking and Financial Management · doi:10.1177/0970844820190404 · Cited by 1
“Besides, miners who set up mining operations face many economic uncertainties' such as high volatility (Courtois et al ., 2013).”
BackgroundEstimating the Impact of the Bitcoin Halving on Its Price Using Synthetic Control
Virtonen, V. (2025) · arXiv · doi:10.48550/arxiv.2511.05512
Cryptocurrency Price Prediction using Deep Learning: A Comparative Study of Time-Series Models
Pandey, D., Bhatnagar, K., Sarfaraz, Y., & Tripathi, I. (2026) · International Conference on Independent Component Analysis and Signal Separation · doi:10.1109/icass69550.2026.11547670
Three essays on the management and economics of blockchain-based systems
Moyano, J. P. (2019) · Zurich Open Repository and Archive (University of Zurich) · doi:10.5167/uzh-175726
“As explained by Courtois, Grajek, and Naik (2014b), blocks contain the following information: • Version number: An integer representing the version number of the bitcoin software.”
BackgroundInfluential
- Authors
- Courtois, N. T., Grajek, M., & Naik, R.
- ORCID
- Courtois, Nicolas T.
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2013
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1310.7935
- OpenAlex
- W1914453127
- Cited by
- 29
- References
- 67
- Citations by year
- 2024: 3 · 2023: 1 · 2021: 5 · 2019: 2 · 2018: 1 · 2017: 2 · 2016: 4 · 2015: 3 · 2014: 5 · 2013: 3
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
- Keywords
- Bitcoin mining, SHA-256, block cipher, energy efficiency, cryptocurrency volatility, cryptographic hash functions
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
