[tromp]

> memory-hard hash functions

You may want to look at asymmetric memory-hard PoW as well (instant memoryless verification)