Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Commit-Reveal schema: bias via abort #19

Open
sambacha opened this issue Oct 12, 2022 · 0 comments
Open

Commit-Reveal schema: bias via abort #19

sambacha opened this issue Oct 12, 2022 · 0 comments
Assignees
Labels
bug Something isn't working Clarify Attack Pattern clarify an ambiguous pattern Document Attack Pattern Document an Attack Pattern not listed New Attack Pattern a new entry in the matrix Smart Contract Smart Contract/DApp/eVM, etc
Milestone

Comments

@sambacha
Copy link
Contributor

Bias via Abort

In the commit-then-reveal protocol each user chooses a secret and shares their commitment to the secret with other users. Later, users reveal their secrets and a random value is calculated by combining the secrets. This approach is susceptible to attacks where a user can choose not to reveal their secret to bias the randomness generation to their advantage "bias-via-abort"

Citation: E. Syta, P. Jovanovic, E. Kokoris-Kogias, N. Gailly, L. Gasser, I. Khoffi,
M. J. Fischer, and B. Ford. Scalable Bias-Resistant Distributed Randomness. In 38th IEEE Symposium on Security and Privacy, May 2017.

@sambacha sambacha added the bug Something isn't working label Oct 12, 2022
@sambacha sambacha self-assigned this Oct 12, 2022
@sambacha sambacha added this to the v4 milestone Oct 12, 2022
@sambacha sambacha added New Attack Pattern a new entry in the matrix Document Attack Pattern Document an Attack Pattern not listed labels Oct 12, 2022
@sambacha sambacha added Smart Contract Smart Contract/DApp/eVM, etc Clarify Attack Pattern clarify an ambiguous pattern labels Feb 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working Clarify Attack Pattern clarify an ambiguous pattern Document Attack Pattern Document an Attack Pattern not listed New Attack Pattern a new entry in the matrix Smart Contract Smart Contract/DApp/eVM, etc
Projects
None yet
Development

No branches or pull requests

1 participant