|
MoneroResearch.info |
 |
 |
 |
|
Xu, M., Zhang, Y., & Zhong, S. 2022. Towards Fair Multiparty Computation in Scriptless Distributed Ledger Systems. [Cryptology ePrint Archive, Report 2022/176]. Added by: Rucknium (05/05/2022, 22:09) Last edited by: Rucknium (05/05/2022, 22:11) |
 |
| Resource type: Miscellaneous BibTeX citation key: Xu2022 View all bibliographic details  |
Categories: Monero-focused Creators: Xu, Zhang, Zhong |
Views: 81/3999
|
Attachments
2022-176.pdf  [16/1126]
|
URLs https://eprint.iacr.org/2022/176 |
| Abstract |
|
Fairness is one of the fundamental properties for multiparty computation (MPC) protocols. Although fair MPC protocols for general functions is shown to be impossible with a dishonest majority, a variant of fairness called ``fairness with penalty'' has been explored recently. A MPC protocol provides fairness with penalty if either all participants can get the output, or the dishonest parties who break the protocol after getting the output will be financially penalized. Fairness with penalty is enabled by previous works leveraging the emerging distributed ledger systems (DLS), e.g. Bitcoin and Ethereum. They utilize the scripting functionality provided by the DLSs to make automatic penalty practical without relying on any trusted third party. However, there is also a significant number of DLSs that do not provide the scripting functionality. In this paper, we propose the ROSE protocol which enables fairness with penalty while only requiring the underlying DLS can verify and broadcast digital signatures on transactions. This requirement can be fulfilled by almost all DLSs, including the scriptless DLSs. To the best of our knowledge, it is still unknown how to realize fairness with penalty on scriptless DLSs before our work. We also provide a implementation of ROSE. The experimental results show that applying ROSE only brings little computation and communication overhead.
|
| Quotes |
|
Besides the above theoretical contributions, we provide an efficient implementation of ROSE for Monero, and the experimental results show that applying ROSE only brings little computation and communication over- head to fair MPC protocols. We choose Monero for that it is a well-known confidential DLS, so that realizing fair MPC on it can enhance privacy protection on the deposit amount and the participants, but Monero provides no scripting functionality. This shows the advantage of ROSE. Added by: Rucknium |