Proceedings 2021 Network and Distributed System Security Symposium 2021
DOI: 10.14722/ndss.2021.24116
|View full text |Cite
|
Sign up to set email alerts
|

RandRunner: Distributed Randomness from Trapdoor VDFs with Strong Uniqueness

Abstract: Generating randomness collectively has been a long standing problem in distributed computing. It plays a critical role not only in the design of state-of-the-art Byzantine faulttolerant (BFT) and blockchain protocols, but also for a range of applications far beyond this field. We present RandRunner, a random beacon protocol with a unique set of guarantees that targets a realistic system model. Our design avoids the necessity of a (BFT) consensus protocol and its accompanying high complexity and communication o… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
2
1
1
1

Citation Types

0
16
0

Year Published

2021
2021
2023
2023

Publication Types

Select...
4
2
1

Relationship

0
7

Authors

Journals

citations
Cited by 18 publications
(16 citation statements)
references
References 26 publications
0
16
0
Order By: Relevance
“…Lenstra and Wesolowski proposed Unicorn [152] with a sufficiently long delay parameter (longer than the time period during which values may be submitted), even the last party to publish its random value cannot predict the final beacon outcome [139]. RandRunner [153] implements a trapdoor VDF with strong uniqueness and does not require an agreement protocol for the VDF inputs, which achieves much lower communication overhead. Additionally, the Ethereum research team [92] plans to use RANDAO [154] and VDF in the Ethereum beacon chain to randomly select block producers.…”
Section: Vdfmentioning
confidence: 99%
See 2 more Smart Citations
“…Lenstra and Wesolowski proposed Unicorn [152] with a sufficiently long delay parameter (longer than the time period during which values may be submitted), even the last party to publish its random value cannot predict the final beacon outcome [139]. RandRunner [153] implements a trapdoor VDF with strong uniqueness and does not require an agreement protocol for the VDF inputs, which achieves much lower communication overhead. Additionally, the Ethereum research team [92] plans to use RANDAO [154] and VDF in the Ethereum beacon chain to randomly select block producers.…”
Section: Vdfmentioning
confidence: 99%
“…HE-Rand [93] is also synchronous as the protocol is described in rounds. RandRunner is designed for practical deployment scenarios with bounded network delay, while it still ensures liveness, public-verifiability, and bias-resistance even under periods of full asynchrony [153].…”
Section: Network Modelmentioning
confidence: 99%
See 1 more Smart Citation
“…Randao [5, 6] is one such proposal where users contribute randomness in plain and the aggregation of these values is hashed and used as a starting point to compute the VDF. Similar protocols where also considered that use VDFs [24,53,68]. However these proposals require a trusted setup (to generate the RSA modulus 𝑁 ) and even when all parties are honest (optimistic case), one party still has to compute the delay function.…”
Section: Related Workmentioning
confidence: 99%
“…Timed commitments [8,19,25,45,49,57] and timed-based cryptography [15,40,63,74] have seen a recent surge of popularity in the research community, due to their wide array of applications. Examples of interest include protocols for distributed randomness generation [68], contract signing [17], e-voting [57], multi-signature transactions in cryptocurrencies [72], zero-knowledge arguments [44], and non-malleable commitments [54], among many others.…”
Section: Introductionmentioning
confidence: 99%