Open this lesson in your favourite AI. It'll walk you through the why, explain the demo, and quiz you on the try-it list.
Satoshi's 2008 whitepaper is nine pages and contains no new cryptography. The insight was a combination: hash-linked blocks (1991, Haber/Stornetta), digital signatures (1970s), proof-of-work (1997, HashCash), and a longest-chain rule. Recognizing that the innovation was a system design, not a primitive, is key to reading any protocol paper since.
Go read the Bitcoin whitepaper at bitcoin.org/bitcoin.pdf — it's 9 pages. Section 4 ('Proof-of-Work') reuses Adam Back's HashCash almost verbatim. Section 5 ('Network') describes Byzantine agreement via longest chain — echoing Lamport's work from the 1980s. What was new was the wiring: PoW resolves forks → longest chain is canonical → sybil resistance comes from hashrate, not identity → therefore anonymous participants can reach agreement. Each piece existed; the combo made digital cash possible.
Use these three in order. Each builds on the one before.
Summarize the Bitcoin whitepaper in 5 bullet points. What problem does each section solve?
Explain how Bitcoin's four inherited primitives (hash-links, digital signatures, proof-of-work, longest-chain) combine to make a sybil-resistant agreement protocol. Which piece prevents which class of attack?
If Bitcoin is a synthesis of older ideas, which of those ideas could've been swapped for something else without losing the security model? Consider: BLAKE3 instead of SHA-256, Schnorr instead of ECDSA, heaviest-chain instead of longest-chain. Name one swap that would break the system entirely, and one that wouldn't.