Provably Secure Blockchain Protocols and Applications to Secure Computation
summary
Defines a q‑bounded synchronous model and a bitcoin backbone abstraction and proves two concrete properties: common prefix (probability 1 − exp(−k) when unique‑success rounds rate γ exceeds a threshold depending on adversary power β and f) and chain quality (honest block fraction ≥ 1 − 1/λ, yielding a 1/3 adversary bound for a simple anonymous agreement protocol). Shows persistence and liveness for a transaction ledger under honest majority, identifies a composability attack when transactions also use proof‑of‑work and proposes a two‑for‑one pause fix, and gives a compiler achieving robustness with compensation in constant rounds.
AI-written summary · about
chapters (23)
- 0:00Intro
- 0:24Blockchain protocols
- 1:45The Bitcoin Backbone : analysis and applications Eurocrypt 2015, joint work with J. Garay, N. Leonardos
- 2:14Our model : g-bounded setting [Eurocrypt 2016, joint works with J. Garay, N. Leonardos]
- 4:43The Bitcoin Backbone (1) parameterized by V , R(), /6
- 8:17The Bitcoin Backbone (4)
- 11:06Backbone Protocol Properties
- 12:20CP : will players converge?
- 12:35Notation
- 13:28Common prefix property (1)
- 18:09Chain Quality Property (1)
- 21:08Nakamoto's BA protocol [Nakamoto2008b]
- 22:45Our first BA protocol
- 24:43Summary of results
- 25:10Applications of the Backbone Protocol
- 26:22Robust transaction ledger = Consensus?
- 27:09Our second BA protocol
- 27:58Transaction Speed vs. Security
- 29:33Analyzing GHOST [joint work with G. Panagiotakos]
- 30:06Fair MPC based on
- 30:57Modeling Fairness based on
- 33:10Robust SFE based on
- 33:45Questions
related talks
56mHaskelling Bitcoin for Great Good
54mDistributed Trust: Is “Blockchain” the answer?
52mGame-Theoretically Secure Protocols Inspired by Blockchains
26mA formal security analysis of Blockchain voting
25mEnhancing Bitcoin Security and Performance with Strong Consistency via...
51mCLOSING KEYNOTE - Security is What We Make of It - Blockchain and Beyond
32mSoK: Private Programmability on Blockchain Systems
52mHow the Bitcoin Protocol Actually Works
