Logo
ScienceStack
Table of Contents
Fetching ...
Sign In

RANDAO-based RNG: Last Revealer Attacks in Ethereum 2.0 Randomness and a Potential Solution

Do Hai Son, Tran Thi Thuy Quynh, Le Quang Minh

TL;DR

Through the analysis, the proposed method can prevent the LRA under favorable network conditions and a Shamir's Secret Sharing-based RANDAO scheme to mitigate the LRA.

Abstract

Ethereum 2.0 is a major upgrade to improve its scalability, throughput, and security. In this version, RANDAO is the scheme to randomly select the users who propose, confirm blocks, and get rewards. However, a vulnerability, referred to as the `Last Revealer Attack' (LRA), compromises the randomness of this scheme by introducing bias to the Random Number Generator (RNG) process. This vulnerability is first clarified again in this study. After that, we propose a Shamir's Secret Sharing (SSS)-based RANDAO scheme to mitigate the LRA. Through our analysis, the proposed method can prevent the LRA under favorable network conditions.

RANDAO-based RNG: Last Revealer Attacks in Ethereum 2.0 Randomness and a Potential Solution

TL;DR

Through the analysis, the proposed method can prevent the LRA under favorable network conditions and a Shamir's Secret Sharing-based RANDAO scheme to mitigate the LRA.

Abstract

Ethereum 2.0 is a major upgrade to improve its scalability, throughput, and security. In this version, RANDAO is the scheme to randomly select the users who propose, confirm blocks, and get rewards. However, a vulnerability, referred to as the `Last Revealer Attack' (LRA), compromises the randomness of this scheme by introducing bias to the Random Number Generator (RNG) process. This vulnerability is first clarified again in this study. After that, we propose a Shamir's Secret Sharing (SSS)-based RANDAO scheme to mitigate the LRA. Through our analysis, the proposed method can prevent the LRA under favorable network conditions.
Paper Structure (6 sections, 5 equations, 2 figures, 1 table)

This paper contains 6 sections, 5 equations, 2 figures, 1 table.

Table of Contents

  1. Introduction
  2. Last revealer attacks in RANDAO-based RNG
  3. Shamir's Secret Sharing-based RANDAO
  4. Proposal
  5. Security analysis
  6. Conclusion

Figures (2)

  • Figure 1: Last revealer attacks on Ethereum.
  • Figure 2: SSS-based RANDAO.