how to use bitcoin to design fair protocols
DESCRIPTION
How to Use Bitcoin to Design Fair Protocols. Iddo Bentov ( Technion ) Ranjit Kumaresan ( Technion ). ePrint 2014/129. Fairness in Secure Computation. Tough luck buddy. Fair coin tossing is impossible [Cle86]. Fair Exchange. Tough luck buddy. Fair exchange is impossible - PowerPoint PPT PresentationTRANSCRIPT
![Page 1: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/1.jpg)
How to Use Bitcoin to Design Fair Protocols
Iddo Bentov (Technion) Ranjit Kumaresan (Technion)ePrint 2014/129
![Page 2: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/2.jpg)
Fairness in Secure ComputationTough luck
buddy
Fair coin tossing is impossible [Cle86]
![Page 3: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/3.jpg)
Fair ExchangeTough luck
buddy
Fair exchange is impossible [Cle86,BN00]
![Page 4: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/4.jpg)
Workarounds• Let’s release output gradually…
• Let’s do partial fairness?
• Let’s be optimistic!
![Page 5: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/5.jpg)
Let’s compensate the poor guy with some money!
If only there was a better
middle ground…
![Page 6: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/6.jpg)
Defn.1: A cryptosystem is secure if my bank uses
it and I’m not losing money
![Page 7: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/7.jpg)
Get it??
![Page 8: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/8.jpg)
Missing PiecesSecurity definition??
Abstraction of what you want from Bitcoin??
![Page 9: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/9.jpg)
REAL IDEAL
≈
Standard Security Definitions
![Page 10: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/10.jpg)
Where is the money???
![Page 11: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/11.jpg)
Match??
![Page 12: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/12.jpg)
≈REAL IDEAL
Standard Security Definitions
![Page 13: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/13.jpg)
REAL IDEAL
≈
Security with “coins”
![Page 14: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/14.jpg)
Abstraction of Bitcoin Functionality
![Page 15: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/15.jpg)
Ladder Protocols
• Multiparty fair secure computation & fair lottery
• Provably Secure
• Also, more efficient than prior ad-hoc constructions [ADMM13,14]
![Page 16: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/16.jpg)
People don’t seem to care much about privacy…
MPC has to provide something that people really need right now…
Killer App for MPC?
• Fair exchange?• Fair lottery?• REAL poker over the
internet?
Thank You!! ePrint 2014/129
![Page 17: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/17.jpg)
Thank You!
![Page 18: How to Use Bitcoin to Design Fair Protocols](https://reader036.vdocument.in/reader036/viewer/2022062305/5681614b550346895dd0cb7e/html5/thumbnails/18.jpg)
The research leading to these results has received funding from the European Union's Seventh Framework
Programme (FP7/2007-2013) under grant agreement no. 259426 – ERC – Cryptography and Complexity