1 / 68

Bitcoin and Blockchains

Explore the vision of David Chaum and the development of Bitcoin and blockchain technology. Learn about the goals of electronic payment systems and the concepts of replicated ledgers and proof-of-work mining.

patricej
Download Presentation

Bitcoin and Blockchains

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Bitcoin and Blockchains Hakim Weatherspoon [slide liberally taken from Kevin Seqniqi, Ittay Eyal, Emin Gun Sirer, Robbert van Renesse] CS6410

  2. A Brave New World - The Vision of David Chaum David Chaum • PhD CS/Business Adm from Berkeley 1982 • Founded International Association for Cryptologic Research (IACR)same year • Known for eCash, mix nets, voting systems…

  3. A Brave New World - The Vision of David Chaum [1983] http://www.hit.bme.hu/~buttyan/courses/BMEVIHIM219/2009/Chaum.BlindSigForPayment.1982.PDF

  4. A Brave New World - The Vision of David Chaum [1983]

  5. A Brave New World - The Vision of David Chaum [1983] Basically ... • Electronic payment systems suffer from loss of privacy and cumbersome trust on single entities. • Privacy protection, however, encounters issues of security and safety of data.

  6. Nick Szabo [1998]

  7. Nick Szabo [1998]

  8. Nick Szabo [1998] http://unenumerated.blogspot.com/2005/12/bit-gold.html

  9. Satoshi Nakamoto and the Anon Post [2008]

  10. Satoshi Nakamoto and the Anon Post [2008]

  11. Satoshi Nakamoto and the Anon Post [2008]

  12. Goals An electronic payment system: • Guarantees safety of transactions, protects against double spends, gives full freedom to owners. • Yet no central trusted authority, no reliance on quorum since identities are not known.

  13. A Replicated Ledger of Transactions Ledger give 10 bitcoins to Jane give 3 bitcoins to Judy give 10 bitcoins to Joe Judy (owns 15 bitcoin) Jane Joe (owns 1 bitcoin)

  14. BitcoinBlockchain • Permissionless, open membership • Proof-of-Work • There are thousands of Bitcoin miners • they use ASIC hardware to compute SHA256 hashes • use about more energy than the country of Denmark • Overall rate is a few transactions per second

  15. The Blockchain Ledger

  16. The Blockchain nonce Ledger HASH( ) < target “cryptopuzzle”

  17. Cryptographic One-Way HashFunction HASH( ) < target • hash(X) =Y • Given X it is easy to compute Y (thedigest) • Given Y it is computationally infeasible tofind • - unless you already know X, ofcourse • In some sense, Y identifiesX • Examples: MD5, SHA-256,SHA-3 Note: unlike an ordinary hash function where you typically havefewer buckets than objects and thus multiple objects per bucket,with cryptographic hash functions you typically have many more“virtual buckets” than objects, and at most one object in abucket

  18. The Blockchain: Proof-of-work / Mining nonce HASH( ) < target • SHA256(SHA256(PrevHash||Tx||Tx||…||Nonce)) < {0}k {0,1}* • Mining: Find Nonce that when hashed with block of transactions results in k leading 0’s. • Block Identifier: Hash of block identifies the block • Each hash identifies the entire prefix of the ledger

  19. The Blockchain

  20. The Blockchain

  21. The Blockchain Exponentially distributed, withconstant mean interval target automatically adjusted every 2016 blocks so that mean interval is 10 minutes

  22. Incentives for Mining • Prize: • “Minting” • Transaction Fees Wins proportional to computation power

  23. Forks Two blocks “mined” at approximately the same time by two different miners

  24. Fork Resolution • Longest chain wins • Transactions on short chain are reverted

  25. Fork Resolution A transaction is confirmedwhen it is buried “deep enough” (typically 6 blocks – i.e., one hour)

  26. Security Threat!

  27. Security Threat! Threat: attacker outruns good miners

  28. Security Threat! 20% Threat: attacker outruns good miners  Security Assumption: good miners own >.5 of the total compute power [blockchain.info, April 2015]

  29. Bitcoin: Network • 1. New transactions are broadcast to all nodes. • 2. Each node collects new transactions into a block. • 3. Each node works on finding a difficult proof-of-work for its block. • 4. When a node finds a proof-of-work, it broadcasts the block to all nodes. • 5. Nodes accept the block only if all transactions in it are valid and not already spent. • 6. Nodes express their acceptance of the block by working on creating the next block in the chain, using the hash of the accepted block as the previous hash. • Nodes always consider the longest chain to be the correct one and will keep working on extending it.

  30. Bitcoin: Network N1 N6 N2 TX1 = [Alice → Bob] TX2 = [Alice → Carol] N5 N3 N4

  31. Bitcoin N1 N6 N2 N5 N3 N4

  32. Bitcoin TX1 N1 N6 N2 TX2 TX2 N5 N3 TX1 TX1 N4 TX2

  33. Bitcoin TX1 N1 N6 N2 TX2 TX2 Paxos /PBFT-like Voting/conensus N5 N3 TX1 TX1 N4 TX2

  34. Bitcoin TX1 N1 N6 N2 TX2 TX2 Who are you? Paxos /PBFT-like Voting/conensus N5 N3 TX1 TX1 N4 TX2

  35. Bitcoin Evil Here’s what I know ? New Good Here’s what I know

  36. Bitcoin TX1 N1 N6 N2 TX2 TX2 N5 N3 TX1 TX1 N4 TX2

  37. Bitcoin TX1 N1 N6 N2 TX2 TX2 N5 N3 TX1 TX1 N4 TX2

  38. Bitcoin SHA256(SHA256(TX || Nonce)) < {0}k {0,1}*

  39. Bitcoin TX1 N1 N6 N2 TX2 TX2 Found it! N5 N3 TX1 TX1 N4 TX2

  40. Bitcoin TX1 N1 N6 N2 TX2 TX2 Found it! N5 N3 TX1 TX1 N4 TX2

  41. Bitcoin TX2 N1 N6 N2 TX2 TX2 N5 N3 TX2 TX2 N4 TX2

  42. Bitcoin TX1 N1 N6 N2 TX2 TX2 N5 N3 TX2 TX2 N4 TX2

  43. Bitcoin N1 TX1 N6 TX2 N5 TX2 I’m confused N4 TX2

  44. Bitcoin

  45. Bitcoin Loses! N1 TX1 B2 B3 ... I’m no longer confused Wins! N4 TX2 B2 B3 ...

  46. Bitcoin

  47. Bitcoin

  48. Bitcoin UTXO

  49. Bitcoin TX2 N1 N6 N2 TX2 TX2 N5 N3 TX2 TX2 N4 Thanks for the coins! TX2

  50. Bitcoin • Many more subtle details, but core mechanism is computational race. • Results: • Breakthrough consensus mechanism in the permissionless setting • Everybody agrees on what is on the blockchain • Always available for reading and appending • Fair • Tamperproof (can’t change or truncate blockchain) • No Single Administrative Domain • Open membership • Challenges: • Electrical usage of a medium-sized country. • Very slow confirmation times. • 3tx/second. Power Consumption…

More Related