They needed to, in order to make the proof-of-work cheap to verify. See my blog ...

		tromp on Oct 18, 2016 \| parent \| context \| favorite \| on: Scrypt is Maximally Memory-Hard They needed to, in order to make the proof-of-work cheap to verify. See my blog post http://cryptorials.io/beyond-hashcash-proof-work-theres-mini... on how asymmetric PoW avoid this handicap.