Proof of work function

Bitcoin's proof-of-work is double SHA-256 over the 80-byte block header: miners vary header fields (nonce, extranonce via the coinbase, timestamp) and hash until the result, interpreted as a number, falls below the network target. There is no equation being "solved" — it is exhaustive guessing against a one-way function, at quintillions of attempts per second network-wide. Verification is the asymmetric payoff: any node checks a candidate block with two hash operations.

Nuance: The work is deliberately useless outside its function; its purpose is to make block production provably costly and history rewriting cumulatively expensive. "Difficulty" is a human-readable expression of the target (see difficulty-adjustment).

Common misstatements:

• "Miners solve complex mathematical problems." — They brute-force hash preimages; nothing is intellectually solved, which is precisely why the race is fair and verification trivial.
• "Mining processes transactions." — Ordering/inclusion is a byproduct of block production; nodes validate transactions whether or not they mine.
• "Quantum computers break SHA-256 mining." — Grover's algorithm offers at most a quadratic speedup against hashing; the acute quantum concerns in Bitcoin discussions target ECDSA/Schnorr signatures, a separate topic.