The Zcash Equihash Analysis

As we announced back in August, we commissioned two security audits of the Zcash codebase and an analysis of our proof-of-work algorithm. We published the two security audits shortly before Zcash’s launch. Today, we are pleased to share the analysis from Solar Designer of the Zcash Equihash proof-of-work scheme.

Solar Designer’s Report

Report URL: http://www.openwall.com/articles/Zcash-Equihash-Analysis

Solar’s summary:

“I was tasked with analyzing Zcash’s choice and use of the Equihash proof-of-work scheme, including its potential for future optimizations on both commodity and custom hardware. Also in-scope were the choice of and potential changes to Equihash parameters that Zcash uses.

“A conclusion is that while Equihash is not among the most ASIC-resistant known PoW schemes, its choice by Zcash may pose a reasonable tradeoff considering Zcash’s multiple goals and depending on which properties of the PoW turn out to be actually most important to users of Zcash. Another conclusion is that Zcash’s current n=200, k=9 Equihash parameters are suboptimal and may need to be changed.”

Related Work

In addition to the analysis presented here, Solar Designer is one of three judges evaluating the first Zcash Mining Competition, which we announced previously on this blog.

The Zcash Company dev team and community are using this analysis, the mining competition, and input from the community to inform potential future proposals to change the consensus protocol. If you’re interested in contributing please join the #zcash-miner-dev community chat channel.

To keep up in general with the Zcash Company, read this blog, follow our @electriccoinco Twitter handle, and join our forum.