Towards a Formally Verified Implementation of the MimbleWimble Cryptocurrency Protocol

Betarte, Gustavo; Cristiá, Maximiliano; Luna, Carlos; Silveira, Adrián; Zanarini, Dante

doi:10.1007/978-3-030-61638-0_1

Cited by 11 publications

(10 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This article builds upon and extends a previously published paper in AIBlock 2020 [ 31 ]. In that paper, we present elements that comprise the essential steps towards the development of an exhaustive formalization of the MW cryptocurrency protocol and the analysis of some of its properties.…”

Section: Introductionmentioning

confidence: 56%

“…Author Contributions: This article builds upon and extends a previously published paper in AIBlock 2020 [31]. All authors have contributed equally to this work.…”

Section: Informed Consent Statement: Not Applicablementioning

confidence: 89%

“…With respect to our previous paper [ 31 ], we have extended the definition of the MW protocol and the idealized model, incorporating in particular the discussion on the security properties of Pedersen commitments. Furthermore, we have studied the strength of the commitment scheme introduced regarding the main security properties a cryptocurrency protocol must have.…”

Section: Final Remarksmentioning

confidence: 99%

See 2 more Smart Citations

A Formal Analysis of the Mimblewimble Cryptocurrency Protocol

Silveira

Betarte

Cristiá

et al. 2021

Sensors

Self Cite

View full text Add to dashboard Cite

Mimblewimble (MW) is a privacy-oriented cryptocurrency technology that provides security and scalability properties that distinguish it from other protocols of its kind. We present and discuss those properties and outline the basis of a model-driven verification approach to address the certification of the correctness of the protocol implementations. In particular, we propose an idealized model that is key in the described verification process, and identify and precisely state [Review 2]sufficientthe conditions for our model to ensure the verification of the relevant security properties of MW. Since MW is built on top of a consensus protocol, we develop a Z specification of one such protocol and present an excerpt of the prototype after its Z specification. This prototype can be used as an executable model. [Review 3]where simulations can be run This allows us to analyze the behavior of the protocol without having to implement it in a low level programming language. Finally, we analyze the Grin and Beam implementations of MW in their current state of development.

show abstract

Section: Introductionmentioning

confidence: 56%

“…Author Contributions: This article builds upon and extends a previously published paper in AIBlock 2020 [31]. All authors have contributed equally to this work.…”

Section: Informed Consent Statement: Not Applicablementioning

confidence: 89%

Section: Final Remarksmentioning

confidence: 99%

See 1 more Smart Citation

A Formal Analysis of the Mimblewimble Cryptocurrency Protocol

Silveira

Betarte

Cristiá

et al. 2021

Sensors

Self Cite

View full text Add to dashboard Cite

show abstract

“…But the process of its proof is very slow, and there are bottlenecks in efficiency. In 2019, Beam and Grin went online, which used Mim-belWimble protocol and aggregated signatures to achieve the purpose of privacy protection of blockchain transactions [12,13,21]. However, both parties of the transaction need to perform an online interaction process, which is not convenient to use in practice.…”

Section: Related Workmentioning

confidence: 99%

A Regulatable Blockchain Transaction Model with Privacy Protection

Zhang¹,

Miao²,

Zhang³

et al. 2021

IJCIS

View full text Add to dashboard Cite

Blockchain is a decentralized distributed ledger technology. The public chain represented by Bitcoin and Ethereum only realizes the limited anonymity of user identity, and the transaction amount is open to the whole network, resulting in user privacy leakage. Based on the existing anonymous technology, the concealment of the sender, receiver, amount of the transaction, and does not disclose any information, which makes the supervision difficult. Therefore, the design of blockchain scheme with privacy protection and supervision functions is of great significance. In this paper, a blockchain transaction model with both privacy and supervision function is proposed. It uses probability encryption to realize the hiding of the true identity of the blockchain transaction, and uses the commitment scheme and zero-knowledge proof technology to realize the privacy protection and guarantee legitimacy verification of the transaction. With the use of encryption technology, the regulators can supervise blockchain transactions without storing the users' information, which greatly reduces the pressure on storage, computing and key management. In addition, it does not rely on specific consensus mechanism and can be used as an independent module. The security performance analysis shows that the proposed scheme has great practicability and has potential application in many fields.

show abstract

“…In 2019, Beam and Grin were proposed. e scheme combines the MimbelWimble protocol and aggregated signature technology to achieve the purpose of protecting the privacy of blockchain transactions [16]. ese works [17,18] proposed a blockchain-based machine learning framework and secure key management scheme (BC-EKM).…”

Section: Related Workmentioning

confidence: 99%

A Regulatable Data Privacy Protection Scheme for Energy Transactions Based on Consortium Blockchain

Chen

et al. 2021

Security and Communication Networks

View full text Add to dashboard Cite

In the blockchain-based energy transaction scenario, the decentralization and transparency of the ledger will cause the users’ transaction details to be disclosed to all participants. Attackers can use data mining algorithms to obtain and analyze users’ private data, which will lead to the disclosure of transaction information. Simultaneously, it is also necessary for regulatory authorities to implement effective supervision of private data. Therefore, we propose a supervisable energy transaction data privacy protection scheme, which aims to trade off the supervision of energy transaction data by the supervisory authority and the privacy protection of transaction data. First, the concealment of the transaction amount is realized by Pedersen commitment and Bulletproof range proof. Next, the combination of ElGamal encryption and zero-knowledge proof technology ensures the authenticity of audit tickets, which allows regulators to achieve reliable supervision of the transaction privacy data without opening the commitment. Finally, the multibase decomposition method is used to improve the decryption efficiency of the supervisor. Experiments and security analysis show that the scheme can well satisfy transaction privacy and auditability.

show abstract

Towards a Formally Verified Implementation of the MimbleWimble Cryptocurrency Protocol

Cited by 11 publications

References 20 publications

A Formal Analysis of the Mimblewimble Cryptocurrency Protocol

A Formal Analysis of the Mimblewimble Cryptocurrency Protocol

A Regulatable Blockchain Transaction Model with Privacy Protection

A Regulatable Data Privacy Protection Scheme for Energy Transactions Based on Consortium Blockchain

Contact Info

Product

Resources

About