Paper 2016/555

On the Security and Performance of Proof of Work Blockchains

Arthur Gervais, Ghassan O. Karame, Karl Wüst, Vasileios Glykantzis, Hubert Ritzdorf, and Srdjan Capkun

Abstract

Proof of Work (PoW) powered blockchains currently account for more than 90% of the total market capitalization of existing digital currencies. Although the security provisions of Bitcoin have been thoroughly analysed, the security guarantees of variant (forked) PoW blockchains (which were instantiated with different parameters) have not received much attention in the literature. In this paper, we introduce a novel quantitative framework to analyse the security and performance implications of various consensus and network parameters of PoW blockchains. Based on our framework, we devise optimal adversarial strategies for double-spending and selfish mining while taking into account real world constraints such as network propagation, different block sizes, block generation intervals, information propagation mechanism, and the impact of eclipse attacks. Our framework therefore allows us to capture existing PoW-based deployments as well as PoW blockchain variants that are instantiated with different parameters, and to objectively compare the tradeoffs between their performance and security provisions.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint. MINOR revision.
Keywords
BlockchainSecurityPerformanceScalability
Contact author(s)
arthur @ gervais cc
History
2016-06-03: received
Short URL
https://ia.cr/2016/555
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2016/555,
      author = {Arthur Gervais and Ghassan O.  Karame and Karl Wüst and Vasileios Glykantzis and Hubert Ritzdorf and Srdjan Capkun},
      title = {On the Security and Performance of Proof of Work Blockchains},
      howpublished = {Cryptology {ePrint} Archive, Paper 2016/555},
      year = {2016},
      url = {https://eprint.iacr.org/2016/555}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.