Re: [tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2014-01-16 Thread Kang
I don't think that a solution which uses DKG is overkill, I think it would be more secure. The more all-or-nothing security provided by DKG based schemes seems preferable to the sliding-scale-of-influence provided by coin flipping ones. Then again I don't know that much about coin flipping protocol

Re: [tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2014-01-10 Thread George Kadianakis
I'm forwarding a private email by Florian Dold which is related to this discussion. I talked with Florian during CCC and we talked some more over email. Reposting with his permission. Thanks! From: Florian Dold Date: Sat, 4 Jan 2014 20:45:15 +0100 To: George Kadianakis > > Hi! > > I'm afraid t

Re: [tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2013-12-11 Thread Kang
As it currently is this suffers from something like the Byzantine general's problem. Attacks may be performed based on the fact that participants don't necessarily transition between states at the same moment. Error handling must be carefully considered and the SYNC round made more robust to compen

Re: [tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2013-12-02 Thread Kang
Hello. I would like to suggest this as an alternative. It's not complete, but the basic idea is there. Filename: - Title: VSS shared rng Author: Kang Created: 2013-12-03 Status: Draft, Needs-Research 1. Overview & Motivation This protocol and document are works in progress. A method of genera

Re: [tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2013-11-30 Thread Kang
Relative to what's in the draft it's an improvement with no obvious downside. If you were going to do this it would probably be best to use a full commitment order instead of only selecting the final committer. That is, instead of having an n'th committer and n-1 chaotically ordered committers you

Re: [tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2013-11-29 Thread Sebastian G.
30.11.2013 02:28, Nick Mathewson: > [...] Trimming to shorten the length. > Filename: 225-strawman-shared-rand.txt > Title: Strawman proposal: commit-and-reveal shared rng > Author: Nick Mathewson > Created: 2013-11-29 > Status: Draft > > 1. Introduction > > This is a strawman proposal: I don'

[tor-dev] Proposal 225: Strawman proposal: commit-and-reveal shared rng

2013-11-29 Thread Nick Mathewson
This used to be an appendix in my drafts for proposal 224, but I split it into its own document since it's orthogonal to the rest of 224. See section 1 for appropriate provisos and disclaimers. I'm writing this as a proposal mainly so other researchers can write better proposals for this kind of