arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2209.08673cs.CR
收藏

具有次线性复杂度的权益证明之证明

Proofs of Proof-of-Stake with Sublinear Complexity

Shresth Agrawal, Joachim Neu, Ertem Nusret Tas, Dionysis Zindros

AI总结:

针对以太坊钱包依赖中心化提供商的安全风险与现有轻客户端效率低下的困境,提出一种具有对数引导复杂度的权益证明轻量级客户端,通过基于 Merkle 树的二分博弈实现高效验证,显著降低时间、通信与能耗,并支持跨链桥等应用。

摘要:

流行的以太坊钱包(如 MetaMask)委托中心化基础设施提供商(如 Infura)代其运行共识客户端逻辑。因此,这些钱包轻量且高性能,但存在安全风险。恶意提供商可以通过伪造支付和余额,或审查交易来误导钱包。另一方面,如今未广泛使用的轻客户端允许去中心化,但在具体效率上低下,通常具有渐近线性的引导复杂度。这在去中心化和性能之间造成了困境。我们设计、实现并评估了一种新的权益证明轻量级客户端,它具有具体高效且渐近对数的引导复杂度。我们的权益证明之证明采用 PoS 区间的 Merkle 树形式。验证者让证明者参与二分博弈,一旦对抗性 Merkle 树在足够深度受到挑战,诚实证明者注定获胜。我们提供了以太坊主网的实现:与以太坊最先进的轻客户端构造相比,在共识执行 10 年后引导时,我们的客户端将完成时间提高了 9 倍,通信提高了 180 倍,能耗降低了 30 倍。作为重要的附加应用,我们的构造可用于实现无需信任的跨链桥,其中轻量级客户端在智能合约内运行并扮演链上验证者的角色。我们证明了我们的构造是安全的,并展示了如何将其用于其他 PoS 系统,如 Cardano(具有完全自适应的对手)、Algorand 和 Snow White。

英文摘要:

Popular Ethereum wallets (like MetaMask) entrust centralized infrastructure providers (e.g., Infura) to run the consensus client logic on their behalf. As a result, these wallets are light-weight and high-performant, but come with security risks. A malicious provider can mislead the wallet by faking payments and balances, or censoring transactions. On the other hand, light clients, which are not in popular use today, allow decentralization, but are concretely inefficient, often with asymptotically linear bootstrapping complexity. This poses a dilemma between decentralization and performance. We design, implement, and evaluate a new proof-of-stake (PoS) superlight client with concretely efficient and asymptotically logarithmic bootstrapping complexity. Our proofs of proof-of-stake (PoPoS) take the form of a Merkle tree of PoS epochs. The verifier enrolls the provers in a bisection game, in which honest provers are destined to win once an adversarial Merkle tree is challenged at sufficient depth. We provide an implementation for mainnet Ethereum: compared to the state-of-the-art light client construction of Ethereum, our client improves time-to-completion by 9x, communication by 180x, and energy usage by 30x (when bootstrapping after 10 years of consensus execution). As an important additional application, our construction can be used to realize trustless cross-chain bridges, in which the superlight client runs within a smart contract and takes the role of an on-chain verifier. We prove our construction is secure and show how to employ it for other PoS systems such as Cardano (with fully adaptive adversary), Algorand, and Snow White.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑