Keeping Authorities "Honest or Bust" with Decentralized Witness Cosigning

Abstract

Abstract-The secret keys of critical network authoritiessuch as time, name, certificate, and software update services -represent high-value targets for hackers, criminals, and spy agencies wishing to use these keys secretly to compromise other hosts. To protect authorities and their clients proactively from undetected exploits and misuse, we introduce CoSi, a scalable witness cosigning protocol ensuring that every authoritative statement is validated and publicly logged by a diverse group of witnesses before any client will accept it. A statement S collectively signed by W witnesses assures clients that S has been seen, and not immediately found erroneous, by those W observers. Even if S is compromised in a fashion not readily detectable by the witnesses, CoSi still guarantees S's exposure to public scrutiny, forcing secrecy-minded attackers to risk that the compromise will soon be detected by one of the W witnesses. Because clients can verify collective signatures efficiently without communication, CoSi protects clients' privacy, and offers the first transparency mechanism effective against persistent man-inthe-middle attackers who control a victim's Internet access, the authority's secret key, and several witnesses' secret keys. CoSi builds on existing cryptographic multisignature methods, scaling them to support thousands of witnesses via signature aggregation over efficient communication trees. A working prototype demonstrates CoSi in the context of timestamping and logging authorities, enabling groups of over 8,000 distributed witnesses to cosign authoritative statements in under two seconds.

UnLynx: A Decentralized System for Privacy-Conscious Data Sharing

“…In order to provide stronger security and to distribute trust, authorities can be decentralized, i.e., composed of multiple collaborating entities, referred to as a collective authority. An example of a scalable collectiveauthority is described by Syta et al [44]. Each server S i from the collective authority possesses a private-public key pair (k i , K i ).…”

“…In fact, trust is distributed among multiple entities that constitute a collective authority [44]. UnLynx achieves two distinct types of decentralization.…”

Short Paper: An Exploration of Code Diversity in the Cryptocurrency Landscape

“…Ethereum, for example, promises to act as a distributed consensus computer (the Ethereum Virtual Machine, or EVM for short) by enabling arbitrary stateful programs to be executed by transactions, while Monero and Zcash promise to improve on the anonymity achieved by Bitcoin transactions. Others don't promise new functionalities but instead aim to support the same functionality as Bitcoin in more cost-effective ways; e.g., Zilliqa [15,8,29,18,16] and Cardano [14,6] incorporate respective ideas arXiv:1810.08420v1 [cs.CR] 19 Oct 2018 from the academic literature about achieving consensus without relying entirely on proof-of-work.…”

Making Speculative BFT Resilient with Trusted Monotonic Counters

“…As traditionally formulated, these require two phases [29] and a quadratic number of messages [17]. However, a wide variety of improvements can be obtained over classical results [11] by varying cryptographic [43], failure-mode [32], [40], timing [15], [38], and safety [28] assumptions.…”