Why Did Bitcoin Choose SHA-256?

SHA-256 was chosen because it is a well-established, highly secure cryptographic hash function standardized by the U.S. National Security Agency (NSA). Its widespread use and proven resilience against collision attacks made it a reliable choice for the integrity of the blockchain.

Furthermore, the algorithm was public, allowing for open-source verification and trust. It provides the necessary difficulty adjustment for the Proof-of-Work mining process.

What Is the Hash Function Commonly Used in Bitcoin’s Proof-of-Work?
What Is the Cryptographic Hashing Function Typically Used in Blockchain?
How Does the ‘Proof-of-Work’ Consensus Mechanism Relate to SHA-256?
Could a Derivative Be Created That Specifically Pays out If a Cryptographic Standard like SHA-256 Is Broken?
What Is the Primary Role of SHA-256 in Bitcoin’s Proof-of-Work?
What Is the Difference between SHA-256 and Keccak-256?
What Is a Merkle Tree and How Does SHA-256 Contribute to Its Function in a Block?
What Is the Mathematical Function That a Miner’s Hash Rate Is Trying to Solve?

Glossar