Hashing, without the mathematics
A function that turns any input into a fixed-length fingerprint. One direction is instant, the other is hopeless, and that asymmetry does most of the work.
A hash function takes any input — a word, a file, an entire book — and returns a fixed-length string. Bitcoin uses one called SHA-256, which always returns 256 bits, written as 64 hexadecimal characters.
The four properties that matter
- Deterministic. The same input always produces the same output, on any machine, forever.
- Fast forwards. Computing the hash of anything takes microseconds.
- Hopeless backwards. Given an output, there is no known method better than guessing inputs until one matches.
- Avalanche. Change one character of the input and the output is entirely different — not slightly different, unrecognisably different.
Hashing the word
hello and hashing hellp — one letter apart — produces two 64-character strings with no visible relationship whatsoever. There is no partial credit and no gradient to follow, which is precisely why working backwards from an output is not feasible.What it is used for here
- Linking blocks. Each block contains the hash of its predecessor, which is what makes the chain a chain.
- Summarising transactions. All transactions in a block are hashed together into a single value, so a small header commits to the entire contents.
- The mining puzzle. Miners search for an input that produces a hash below a target value. Since the only method is guessing, the search is provably costly. See proof of work.
- Addresses. A public key is hashed to produce the address you actually share.
Why the mining puzzle works
Nobody can be clever about it. There is no shortcut, no insight, no better algorithm — the only approach is to try enormous numbers of candidates and check each one. That makes the work genuinely expensive to produce.
And checking is instant. Anyone can verify a claimed solution with a single hash computation, which is what lets the whole network confirm in microseconds what took the network's combined hardware ten minutes to find.
It is the same property that makes hashcash work against spam, and it is why proof of work is called proof: the solution is self-evidencing. You do not need to trust that someone did the work, because the answer could not exist otherwise.
A caution
Hash functions are not permanently safe. Older ones — MD5, SHA-1 — were broken over time as attacks improved, and both are now unsuitable for security. SHA-256 has no known practical weakness, and "no known weakness" is a statement about the present, not a guarantee about the future.
echo -n hello | shasum -a 256. Change one letter and run it again. The result makes the avalanche property obvious in a way no description does.