Why use hash puzzles for proof-of-work?