Cryptology ePrint Archive: Report 2018/1184

Uncontrolled Randomness in Blockchains: Covert Bulletin Board for Illicit Activity

Nasser Alsalami and Bingsheng Zhang

Abstract: Public blockchains can be abused to covertly store and disseminate potentially harmful digital content. Consequently, this threat jeopardizes the future of such applications and poses a serious regulatory issue. In this work, we show the severity of the problem by demonstrating that blockchains can be exploited as a covert bulletin board to secretly store and distribute arbitrary content. More speci cally, all major blockchain systems use randomized cryptographic primitives, such as digital signatures and non-interactive zero-knowledge proofs, and we illustrate how the uncontrolled randomness in such primitives can be maliciously manipulated to enable covert communication and hidden persistent storage. To clarify the potential risk, we design, implement and evaluate our technique against the widely-used ECDSA signature scheme, the CryptoNote's ring signature scheme, and Monero's ring con dential transactions. Importantly, the signi cance of the demonstrated attacks stems from their undetectability, their adverse e ect on the future of decentralized blockchains, and their serious repercussions on users' privacy and crypto funds. Finally, besides presenting the attacks, we examine existing countermeasures and devise two new steganography-resistant blockchain architectures to practically thwart this threat in the context of blockchains.

Category / Keywords: applications / Blockchain, Steganography, Kleptography, ASA, Covert Broadcast Channels, Content Insertion, Wallet Subversion

Date: received 4 Dec 2018, last revised 20 Feb 2019

Contact author: n alsalami at lancaster ac uk

Available format(s): PDF | BibTeX Citation

Version: 20190220:153921 (All versions of this report)

Short URL: ia.cr/2018/1184


[ Cryptology ePrint archive ]