What is the benefit of using a Merkle Root rather than simply hashing all of the transactions in the block?

I understand what the merkle root is and how it is calculated, but I have not been able to figure out what is the actual purpose behind using this kind of hashing solution?

I mean, I know that the root itself must be there, to identify the exact block's payload, but what I don't get is why didn't he just choose to calculate the hash using a normal double SHA256 over the entire block's transactions? Why did he come out with this tree-idea instead?

I do not see the tree based hashing to be adding any security, neither to have any useful advantages over a regular (linear) hash... so am I missing something?

merkle-tree

Gigi

Posted 2013-05-08T10:24:59.447

Reputation: 600

Answers

The Merkle tree allows verifying that a transaction exists in the block without having the entire block, by following its Merkle branch. Among other things this enables:

SPV (lightweight) clients
Blockchain pruning
Smart pool miners

Meni Rosenfeld

Posted 2013-05-08T10:24:59.447

Reputation: 18 542

2What are "blockchain pruning" and "smart pool miners"? – Pacerier – 2013-05-14T19:01:56.787

2@Pacerier: Pruning means deleting old spent transactions from the blockchain. Smart miners means that the miner constructs the block himself, and sends the pool the Merkle branch of the generation transaction to prove that it credits the pool. – Meni Rosenfeld – 2013-05-22T15:01:27.790

To see how it simplifies verification, consider that in order to verify a transaction T is part of the blockchain, the verifier has to get from the transaction hash to the merkle root. If there are n transaction, there are log_2(n) levels to climb in the merkle tree, so to speak. To climb from the transaction T's hash to its parent P, we only need its sibling, since that is how the tree is built. Then to climb the next level we only need the sibling of the parent we calculated P, and so forth.

To climb all log_2(n) levels of the tree we only need T's hash plus log_2(n) extra hashes (including the merkle root). If we did a linear concatenation of blocks, we would need much more information than log_2(n) << n

I found this article helpful for illustration:

https://en.bitcoin.it/wiki/Merged_mining_specification#Merkle_Branch

Hope this helps

syzygy

Posted 2013-05-08T10:24:59.447

Reputation: 221

This is the answer that really explains the question – why Merkle root vs straight hash. – uzyn – 2016-07-26T03:13:28.383

I believe it's to enable Simplified Payment Verification (SPV). A client who doesn't wish to download the full blockchain can still verify that a transaction exists in the blockchain by confirming that the block headers are linked, and validating the relevant parts of the merkel tree to confirm the transaction really exists in the block.

Ashley Holman

Posted 2013-05-08T10:24:59.447

Reputation: 231