论文标题
金鱼:对以太坊不再攻击吗?
Goldfish: No More Attacks on Ethereum?!
论文作者
论文摘要
LMD Ghost共识协议是利用以太坊的关键组成部分。在目前的形式中,该协议是脆弱的,这是最近的攻击和修补尝试所证明的。我们提出了Goldfish,这是一种满足LMD Ghost倒入所需的关键属性的新协议:假设大多数验证器遵循协议,则昏昏欲睡的模型中的Goldfish是安全的。 Goldfish具有Reorg的弹性,因此诚实地生产的块被保证包含在分类帐中,并且它支持快速确认,而预期的确认延迟与所需的安全水平无关。亚采样验证器可以提高金鱼的沟通效率,而金鱼则可以与最终性/问责制小工具相结合。至关重要的是,金鱼在结构上类似于LMD Ghost,为以太坊提供了可靠的采用途径。对LMD Ghost的攻击在诚实验证器中缺乏协调器,通常由经典BFT协议中的锁定机制提供。但是,锁定需要从所有参与者的法定人数中进行投票,并且与参与的波动不兼容。 Goldfish由一种新颖的协调机制提供动力,以同步诚实验证者的行为。我们的原型实施金鱼的实验表明了实用性。
The LMD GHOST consensus protocol is a critical component of proof-of-stake Ethereum. In its current form, this protocol is brittle, as evidenced by recent attacks and patching attempts. We propose Goldfish, a new protocol that satisfies key properties required of a drop-in replacement for LMD GHOST: Goldfish is secure in the sleepy model, assuming a majority of the validators follows the protocol. Goldfish is reorg resilient so that honestly produced blocks are guaranteed inclusion in the ledger, and it supports fast confirmation with expected confirmation latency independent of the desired security level. Subsampling validators can improve the communication efficiency of Goldfish, and Goldfish is composable with finality/accountability gadgets. Crucially, Goldfish is structurally similar to LMD GHOST, providing a credible path to adoption in Ethereum. Attacks on LMD GHOST exploit lack of coordination among honest validators, typically provided by a locking mechanism in classical BFT protocols. However, locking requires votes from a quorum of all participants and is not compatible with fluctuating participation. Goldfish is powered by a novel coordination mechanism to synchronize the honest validators' actions. Experiments with our prototype implementation of Goldfish suggest practicality.