Paper 2018/138

But Why does it Work? A Rational Protocol Design Treatment of Bitcoin

Christian Badertscher, Juan Garay, Ueli Maurer, Daniel Tschudi, and Vassilis Zikas

Abstract

An exciting recent line of work has focused on formally investigating the core cryptographic assumptions underlying the security of Bitcoin. In a nutshell, these works conclude that Bitcoin is secure if and only if the majority of the mining power is honest. Despite their great impact, however, these works do not address an incisive question asked by positivists and Bitcoin critics, which is fuelled by the fact that Bitcoin indeed works in reality: Why should the real-world system adhere to these assumptions? In this work we employ the machinery from the Rational Protocol Design (RPD) framework by Garay et al. [FOCS'13] to analyze Bitcoin and address questions such as the above. We show assuming a natural class of incentives for the miners' behavior i.e., rewarding them for adding blocks to the blockchain but having them pay for mining here one can reserve the honest majority assumption as a fallback, or even, depending on the application, completely replace it by the assumption that the miners aim to maximize their revenue. Our results underscore the appropriateness of RPD as a ``rational cryptography'' framework for analyzing Bitcoin. Along the way, we devise significant extensions to the original RPD machinery that broaden its applicability to cryptocurrencies, which may be of independent interest.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
A major revision of an IACR publication in EUROCRYPT 2018
Keywords
Blockchain ProtocolsRational Protocol DesignBitcoin
Contact author(s)
chrigi badi @ gmail com
History
2019-02-16: last of 4 revisions
2018-02-07: received
See all versions
Short URL
https://ia.cr/2018/138
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2018/138,
      author = {Christian Badertscher and Juan Garay and Ueli Maurer and Daniel Tschudi and Vassilis Zikas},
      title = {But Why does it Work? A Rational Protocol Design Treatment of Bitcoin},
      howpublished = {Cryptology ePrint Archive, Paper 2018/138},
      year = {2018},
      note = {\url{https://eprint.iacr.org/2018/138}},
      url = {https://eprint.iacr.org/2018/138}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.