Preimages Explained: How Hash Functions Secure Bitcoin Mining and Lightning Payments

If you run a Bitcoin miner — whether it is a Bitaxe solo miner on your desk or an Antminer S21 heating your garage — you are already participating in one of the most elegant cryptographic systems ever built. At the heart of that system sits a concept most people never think about: the preimage.

Preimages are not glamorous. They do not make headlines. But without them, Bitcoin addresses would be insecure, Proof-of-Work would be impossible, and the Lightning Network would not exist. Understanding preimages is understanding why Bitcoin actually works — not as a financial instrument, but as a censorship-resistant protocol secured by mathematics.

This guide breaks down preimages from first principles, shows exactly how they operate inside Bitcoin and Lightning, and explains why every home miner should care about the cryptographic foundations beneath every hash their hardware computes.

Hash Functions: The One-Way Gate

Before we can talk about preimages, we need to understand the machine they feed into: the hash function.

A hash function takes any input — a single character, an entire novel, a block header — and produces a fixed-length output called a hash (or digest). Bitcoin uses SHA-256, which always outputs a 256-bit string regardless of input size.

Three properties make hash functions critical to Bitcoin:

Think of it like grinding metal in a machine shop: you can turn a steel block into shavings, but you cannot reconstruct the block from the shavings. That is the one-way gate. The steel block is the preimage. The shavings are the hash. And your ASIC miner is the machine doing the grinding — billions of times per second.

What Is a Preimage?

The preimage is simply the original input to a hash function. Whatever data goes into SHA-256 — that is the preimage. Whatever comes out — that is the hash.

The term comes from mathematics. In set theory, the preimage of an element in the output set is the element in the input set that maps to it. In cryptography, we care about three related security properties:

• Preimage resistance: Given a hash h, it is computationally infeasible to find any input m such that hash(m) = h.
• Second preimage resistance: Given an input m1, it is infeasible to find a different input m2 such that hash(m1) = hash(m2).
• Collision resistance: It is infeasible to find any two distinct inputs that produce the same hash.

SHA-256, the hash function Bitcoin uses, satisfies all three. This is not a matter of opinion — it is a mathematical property verified by decades of cryptanalysis. Every hash your miner computes relies on these guarantees holding.

Preimages in Bitcoin: Addresses, Blocks, and Proof-of-Work

Bitcoin Addresses

When you generate a Bitcoin wallet, you create a private key (a random 256-bit number). From that private key, elliptic curve multiplication produces a public key. That public key is then hashed — first through SHA-256, then through RIPEMD-160 — to create a 160-bit hash that becomes your Bitcoin address (with some encoding on top).

In this chain, the public key is the preimage and the address is the hash. Because of preimage resistance, anyone can see your address on the blockchain without being able to reverse-engineer your public key (until you spend from that address, which reveals the public key in the transaction signature).

This is why Bitcoin privacy practices recommend using a new address for each transaction — once a public key is revealed, the security model shifts from hash-based protection to elliptic curve cryptography alone.

Block Headers and Mining

Here is where preimages connect directly to what your mining hardware does every second of every day.

A Bitcoin block header contains six fields: version, previous block hash, Merkle root, timestamp, difficulty target, and nonce. This 80-byte block header is the preimage that gets double-SHA-256 hashed. The resulting hash must be below the current difficulty target for the block to be valid.

Your miner — whether it is a Bitaxe solo miner running at 500 GH/s or an Antminer S21 pushing 200 TH/s — is doing one thing: iterating through nonce values (and extranonce values), constructing a new preimage each time, hashing it, and checking if the output meets the difficulty requirement.

At a network hashrate exceeding 800 EH/s, the global mining fleet collectively tests roughly 800 quintillion preimages per second. When a miner finds one that produces a hash below target, they have found a valid Proof-of-Work and can claim the 3.125 BTC block reward.

This is the raw mechanics of mining. No abstraction, no metaphor. Your hardware is a preimage search engine.

Preimages as Cryptographic Commitments

Beyond addresses and mining, preimages enable a powerful cryptographic primitive: the commitment scheme.

A commitment scheme works in two phases:

1. Commit phase: You hash your data (the preimage) and publish only the hash. This commits you to the data without revealing it.
2. Reveal phase: You later reveal the preimage. Anyone can hash it themselves and verify it matches the original commitment.

In Bitcoin transactions, this pattern appears everywhere. When you send Bitcoin to an address, you are committing funds to the hash of a public key. The recipient later reveals the preimage (public key) and provides a valid signature to spend the funds. The commitment cannot be faked because of preimage resistance, and it cannot be changed after the fact because the transaction is recorded on an immutable blockchain.

This is not theoretical elegance — it is the mechanism that makes trustless transactions possible. No bank, no intermediary, no central authority. Just mathematics.

Preimages in the Lightning Network

The Lightning Network extends Bitcoin’s base layer with a second-layer protocol for fast, low-fee payments. Preimages are the linchpin of the entire system.

Lightning Invoices and Payment Proofs

When a Lightning node creates an invoice, it generates a random secret — the payment preimage. It then hashes that preimage to produce a payment hash, which gets embedded in the invoice.

The payer never sees the preimage until the payment succeeds. When the payment reaches the recipient, the recipient reveals the preimage to the final routing node, who reveals it to the previous node, and so on back to the payer. Possession of the preimage serves as cryptographic proof of payment — undeniable, unforgeable, and requiring no third-party arbitration.

Hashed Time-Locked Contracts (HTLCs)

HTLCs are the smart contracts that make Lightning routing work. Here is the mechanism:

The beauty of this system is atomicity. Either every node in the route gets paid (because the preimage propagates all the way back), or no one gets paid (because the time lock expires). There is no state where an intermediary can steal funds or a payment gets stuck halfway. Preimage revelation is all-or-nothing.

Multi-Hop Payment Example

Suppose Alice wants to pay Dave, but has no direct channel. The payment routes: Alice → Bob → Carol → Dave.

1. Dave generates preimage P and sends hash(P) to Alice in an invoice.
2. Alice creates an HTLC to Bob: “Here is 1,003 sats if you can show me P where hash(P) matches.”
3. Bob creates an HTLC to Carol: “Here is 1,002 sats if you reveal P.”
4. Carol creates an HTLC to Dave: “Here is 1,001 sats if you reveal P.”
5. Dave reveals P to Carol and collects 1,001 sats.
6. Carol reveals P to Bob and collects 1,002 sats (keeping 1 sat fee).
7. Bob reveals P to Alice and collects 1,003 sats (keeping 1 sat fee).

Every step is secured by the same preimage. No trust required between any parties. This is decentralized payment routing built on pure cryptography.

Why Home Miners Should Understand Preimages

You might wonder why any of this matters if you are just running a miner at home. Here is why:

• You are computing preimages. Every hash your miner produces is the result of constructing a preimage (block header with a specific nonce) and running it through SHA-256d. Understanding this demystifies what your hardware actually does.
• Solo mining is a preimage search. When you solo mine with a Bitaxe, you are searching for one specific preimage — out of an astronomical number of possibilities — that produces a hash below the difficulty target. The odds are long, but the reward is an entire 3.125 BTC block.
• Lightning payments depend on it. If you accept Lightning payments for goods or services (or if you run a Lightning node alongside your miner), preimages are what secure every transaction you send or receive.
• Sovereignty requires understanding. The cypherpunk ethos is “don’t trust, verify.” You cannot verify what you do not understand. Knowing how preimages, hashes, and commitments work means you are not taking anyone’s word for it — you can reason about Bitcoin’s security model from first principles.

At D-Central, we believe that running your own miner is an act of sovereignty. Understanding the cryptography behind it makes that sovereignty real, not performative.

Preimage Security: What Could Go Wrong?

SHA-256 has been battle-tested since 2001 and remains unbroken. But it is worth understanding the threat model:

Bitcoin’s double-SHA-256 (hashing the hash) provides additional margin. The protocol was designed with long-term security in mind — a reflection of Satoshi’s careful engineering.

From Theory to Hardware: Preimages and Your Mining Setup

Every piece of mining hardware D-Central sells — from open-source Bitaxe solo miners to full-scale ASICs — is a specialized preimage search machine. The ASIC chips inside an Antminer or Bitaxe are purpose-built silicon designed to compute SHA-256 hashes as fast as physically possible.

When we repair ASIC miners at our facility in Laval, Quebec, we are restoring preimage search capacity. A dead hashboard is a section of silicon that has stopped iterating through nonces. Bringing it back online means more preimages tested per second, more chances at finding a valid block.

And when we build Bitcoin Space Heaters, we are turning waste heat from preimage computation into something useful: warmth for Canadian winters. The thermodynamics are straightforward — every joule your miner consumes becomes heat. The question is whether that heat has value. In Canada, for roughly six months of the year, it absolutely does.

This is the Bitcoin Mining Hacker philosophy. Take institutional-grade cryptographic hardware, understand it deeply, and deploy it in ways that serve individual sovereignty rather than corporate data centers.

FAQ