I just started reading about Litecoin's Scrypt algorithm and all the explanations are quite complex. I have understood that Scrypt uses more memory than Bitcoin's SHA-256 which makes it ASIC-resistant and prevents centralization.

But, from what I understand we still require powerful GPUs to mine Litecoins because operations on larger data sets (more memory) will be faster and more efficient in GPU than in CPU.

Also, why is it not possible to build an ASIC machine for Scrypt. Is it due to the complexity involved in the algorithm? I just want to know if it's impossible or just difficult. In the future, can we expect ASIC machines for Scrypt as well?

  • 5
    I don't have personal experience here, but a quick Google suggests that Scrypt ASICs have been on the market for a couple years now. Oct 26, 2016 at 2:35

2 Answers 2


The Scrypt algorithm started out as an "ASIC-resistant" algorithm, but it isn't anymore.

Because it is highly memory-intensive, it was thought to be prohibitive to design and use ASICs for it. Initially it kind of was. With cost of memory decreasing and the necessary research put in -- in order to unlock the profit potential attainable using Scrypt-capable ASICS -- that ASIC-resistance has largely vanished.

A great many ASIC hardware projects for Scrypt started out with great fanfare, but only rather few have succeeded and ever been delivered. A rather large part failed along the way or were scams from the beginning, with developers pocketing money for pre-orders and never delivering any product. Despite these numerous frauds, a number of ASIC development projects have actually been completed and mining hardware has been delivered. As soon as a successfully completed machine was deployed and hit the market, this was always visible in a significant increase in mining difficulty for Scrypt coins whose profitability has, as a result, steadily decreased with every new ASIC model delivered.

The only residues of Scrypt being ASIC-resistant these days are the lower hash rates you see with Scrypt-based Crypto coins as opposed to SHA-256 ones.

  • Litecoin was never ASIC resistant - see bitcoin.stackexchange.com/questions/36642/…
    – Nick ODell
    Feb 11, 2017 at 18:12
  • 2
    Scrypt was designed to be (or at least claimed to be) GPU resistant. When it failed at that, it got rebranded as ASIC-resistant (but fails at that too). May 12, 2017 at 19:01
  • yes, I know -- hence the quotation marks, indicated that that's what people initially said about the algorithm.
    – marquix
    Dec 24, 2018 at 23:11

Scrypt is a highly memory-intensive algorithm: it generates and uses a very large number of pseudo-random values in computing the final output, and for efficiency reasons, all of these intermediate values need to be stored until the computation is done.

The cost of an ASIC depends roughly on the physical size of the chip, and memory circuits take up a great deal of space. A memory-light function like Bitcoin's SHA-256 requires a small circuit, so you can fit thousands of computation units on a reasonably-priced chip. A similarly-priced Litecoin ASIC, on the other hand, might only be able to fit one or two computation units on the chip.

  • 1
    Then how do you explain that Litecoin ASICs had a larger speed boost over GPU mining then Bitcoin ASICs had over GPUs? Oct 26, 2016 at 3:04
  • 2
    Scrypt is not memory hard, it has trivial time memory tradeoffs which all scrypt ASICs implement, allowing you to use almost no memory with a linear increase in time.
    – Claris
    Oct 29, 2016 at 12:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.