How NiPoPoWs Enable Trustless Light Clients And Cross-Chain Bridges On Ergo
Non-Interactive Proofs of Proof-of-Work compress blockchain verification from gigabytes to kilobytes while maintaining full security.
TL;DR
Lightweight Verification
Verify blockchain integrity with just kilobytes instead of gigabytes - 1000x smaller than full blockchain
Mobile-First
Enable smartphones and low-power devices to verify PoW chains without downloading headers
Cross-Chain Bridges
Trustless bridges between blockchains without relying on multi-sig or centralized services
Same Security
Cryptographically equivalent security to full nodes with mathematical proof guarantees
The Blockchain Size Problem
A blockchain is essentially an append-only database that records every transaction ever made on the platform. They can stretch to tens or hundreds of gigabytes, meaning that miners and full nodes need significant resources to help maintain the network.
Resource-constrained devices like smartphones and older computers are generally not suitable, dramatically reducing the number of machines that can participate in securing the ledger, and limiting decentralization in the process.
Ergo's Solution
Non-Interactive Proofs of Proof-of-Work (NiPoPoWs) are lightweight blockchain proofs that provide almost all of the security of the full blockchain. These succinct proofs enable any device to verify PoW chains, without needing to download gigabytes of data.
What Are NiPoPoWs?
Non-Interactive Proofs of Proof-of-Work (NiPoPoWs) are a way to cryptographically verify that a Proof-of-Work blockchain is legitimate without downloading the entire chain. Instead of syncing thousands of blocks, a NiPoPoW compresses the most important parts of the chain into a small proof that is easy to check. This is typically just a few kilobytes, rather than many gigabytes.
The idea of NiPoPoWs was originally published in an academic paper written by three researchers from IOHK and the University of Illinois. The researchers' aim was to improve the performance of existing PoW-based cryptocurrencies.
While the full blockchain grows in size linearly, since it records every transaction, NiPoPoWs grow in size far more slowly (logarithmically). They also require only a single message between the prover and verifier of the transaction: a self-contained, portable proof of proof-of-work (PoPoW) that any verifier can check instantly. These succinct proofs are therefore both useful and sustainable as blockchain adoption grows.
NiPoPoWs allow devices with limited storage and bandwidth to act as true light clients, enabling them to verify network security without running or trusting full nodes. This approach of proof compression is more efficient and more secure than conventional SPV (Simplified Payment Verification) clients, which still need to download block headers.
By allowing any device to verify a PoW blockchain without syncing, NiPoPoWs reduce the barriers for nodes and offer ordinary users robust security guarantees.
How NiPoPoWs Work
NiPoPoWs rely on the concept of superblocks. These are blocks that are mined with a far greater Difficulty than is required.
Proof-of-Work blockchains are secured by miners: dedicated devices that carry out computationally intensive work to prove they are adding transactions to the blockchain honestly. Mining requires a large amount of energy, so dishonest miners not only waste the cost of this power, but forgo any block rewards and transaction fees they would receive.
In simple terms, a miner takes the most recent block header, adds a summary for a batch of new transactions, and adds a changing number to it, known as the nonce. They then hash that collective data. (A hash is a kind of cryptographic digest, which provides a unique "fingerprint" of a piece of data. The hash cannot be predicted in advance, only calculated.) If the hash has a certain number of leading zeroes, it is valid and the miner has the right to add the next block to the chain. If not, they change the nonce and try again.
The more leading zeroes are required, the less likely it is that a miner will find a hash that meets the criteria, and the greater the network Difficulty is. This is how blockchain networks adjust when more miners come online, bringing more processing power with them, so that block time is always roughly the same – in Ergo's case, around two minutes.
Occasionally, through chance, a miner finds a hash with a much greater number of leading zeroes. Difficulty is far higher than is required. These are known as superblocks, and have different levels of Difficulty, depending on how many additional leading zeroes they have.
Card Game Analogy
Imagine that instead of using computational hashrate, miners compete to add the next block to the blockchain by drawing five cards from a shuffled deck. The miner that draws a straight (five cards in a row) wins. A superblock is like drawing a straight flush (five cards of the same suit in a row).
NiPoPoWs use these rare and unusually Difficult blocks to construct proofs, using the block headers. Superblocks occur at random, but at predictable statistical rates. NiPoPoWs group these superblocks into levels, depending on their Difficulty, creating a kind of hierarchy of proofs for the blockchain.
To create a NiPoPoW proof, a prover selects a small number of superblocks from each level and links them together cryptographically, to demonstrate the full chain of work. Only a few block headers are needed, and so the proof remains small. Because the proof is self-contained, no back-and-forth communication is needed, but the proof still guarantees the underlying work and security of the original blockchain.
Size Comparison: Full Blockchain vs SPV vs NiPoPoWs
| Full Blockchain | SPV Headers | NiPoPoW Size |
|---|---|---|
| 1 GB | 5 MB | 10 KB |
| 10 GB | 20 MB | 20 KB |
| 100 GB | 80 MB | 30 KB |
| 1,000 GB (1 TB) | 300 MB | 50 KB |
NiPoPoWs Vs SPV And ZK Clients
Bitcoin and other PoW networks already have "light" clients, in the form of SPV (Simplified Payment Verification) clients. However, these are still significantly heavier than Ergo's light clients.
SPV clients still rely on long chains of headers. While accessing these is far less resource-intensive than downloading the entire blockchain, it still comes with a considerable overhead that prevents lower-powered devices from verifying the blockchain and making transactions safely.
Because NiPoPoWs are succinct proofs, which grow only very slowly compared to the size of the overall blockchain, they are ideal for stateless clients (no full blockchain download) and environments where bandwidth is limited.
Similarly, NiPoPoWs are far more lightweight than ZK "light" clients. Zero-knowledge cryptography tends to be heavy, complex, and expensive, and the ZK proofs for PoW require large cryptographic circuits. Because NiPoPoWs are native to PoW's structure, relying only on what is already there, they can remain highly streamlined – and without the trusted setup on which ZK proofs often rely.
Why NiPoPoWs Matter For Ergo
Ergo is the only major proof-of-work chain with NiPoPoWs enabled. This offers a series of benefits to users and the ecosystem as a whole:
- Stateless light clients. Transactions can be made with the same security guarantees as full nodes, without storing full blockchain state (UTXO set, etc).
- Mobile-first verification. Low-powered devices and even older smartphones are able to interact with the blockchain.
- Cold storage verification. Offline devices don't need to check state or even headers, only a tiny proof (which can easily be stored on a USB drive), enabling them to verify blockchain integrity easily and securely.
- Cross-chain bridges. NiPoPoWs allow a blockchain to verify the proof-of-work of another chain without running a full node for that chain. This replaces common but less secure methods such as multi-sig transactions, and centralized, trusted services.
Stateless Light Clients
Make transactions with full node security without storing blockchain state or UTXO sets
Mobile Verification
Smartphones and older devices can interact with blockchain using minimal resources
Cold Storage Verification
Offline devices verify blockchain integrity with tiny proofs stored on USB drives
Trustless Bridges
Cross-chain verification without trusted third parties or multi-sig compromises
Conclusion
NiPoPoWs are a significant and powerful development in blockchain technology, and bring several noteworthy advantages to Ergo – the only major network so far to have implemented them.
Light clients, which provide similar security guarantees as a full blockchain download, mean that network participation and decentralization can remain high, with no downsides. NiPoPoWs also underpin efficient and secure cross-chain bridges.
Frequently Asked Questions
Share this post
Help spread the word about Ergo's innovative blockchain technology