Paper 2016/464

Beaver: A Decentralized Anonymous Marketplace with Secure Reputation

Kyle Soska, Albert Kwon, Nicolas Christin, and Srinivas Devadas


Amid growing concerns of government surveillance and corporate data sharing, web users increasingly demand tools for preserving their privacy without placing trust in a third party. Unfortunately, existing centralized reputation systems need to be trusted for either privacy, correctness, or both. Existing decentralized approaches, on the other hand, are either vulnerable to Sybil attacks, present inconsistent views of the network, or leak critical information about the actions of their users. In this paper, we present Beaver, a decentralized anonymous marketplace that is resistant against Sybil attacks on vendor reputation, while preserving user anonymity. Beaver allows its participants to enjoy open enrollment, and provides every user with the same global view of the reputation of other users through public ledger based consensus. Various cryptographic primitives allow Beaver to offer high levels of usability and practicality, along with strong anonymity guarantees. Operations such as creating a listing, purchasing an item, and leaving feedback take just milliseconds to compute and require generating just a few kilobytes of state while often constructing convenient anonymity sets of hundreds of transactions.

Available format(s)
Publication info
Preprint. MINOR revision.
reputation systemsanonymitye-commerceconsensus
Contact author(s)
ksoska @ cmu edu
2016-08-20: revised
2016-05-13: received
See all versions
Short URL
Creative Commons Attribution


      author = {Kyle Soska and Albert Kwon and Nicolas Christin and Srinivas Devadas},
      title = {Beaver: A Decentralized Anonymous Marketplace with Secure Reputation},
      howpublished = {Cryptology ePrint Archive, Paper 2016/464},
      year = {2016},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.