Proof: Without ( \log_2 n ) independent digests, the adversary can simulate missing branches with arbitrary hashes and find collisions. This is a combinatorial argument based on the pigeonhole principle on hash chains.

The book was written with a specific philosophy: to bridge the gap between abstract theory and practical application. Merkle aimed to create a resource that was:

The minimal number of hash values required to authenticate a single leaf in an ( n )-leaf Merkle tree is ( \lceil \log_2 n \rceil ).

A Merkle tree is binding : Given a root ( R ) and a leaf index ( i ), the prover cannot find two different leaf values ( L, L' ) such that both verify against ( R ).

Top