BZPEERPapers, people, evidence and research paths
Menu

Discover

SearchFind papers, people, topics, institutions and opportunities from one place.GraphSee how papers, authors, topics and evidence connect.

Research tools

HomeContinue from the papers, people and topics that matter now.CollectionsTurn saved papers into reading lists, evidence maps and shareable context.ResearchReconstruct the path that led you from search to paper to question.CollaborationMove from a paper, topic or expert request into a focused thread.PublishCreate full-text research articles with metadata, formulas and versions.

Network

ExpertsFind specialists whose work and reviews explain why they can help.CommunitiesJoin research groups organized around papers, topics and shared evidence.

Opportunities

ListingsBrowse roles, calls and collaborations connected to real research context.

Account

Log inReturn to your saved papers, graph views and active threads.Create accountStart saving papers, building a research trail and joining teams.
Log inCreate account

Source author record

Alberto Sonnino

Alberto Sonnino appears in the imported research catalog. Authorship, coauthor and topic links are available while profile ownership is still unclaimed.

ResearcherUnclaimed source record
Cryptography and Securitycond-mat.stat-mechDistributed, Parallel, and Cluster Computingphysics.data-anphysics.plasm-phcond-mat.mtrl-sciphysics.class-ph

Catalog footprint

What is connected

20works
7topics
4close collaborators

Actions

Connect this record

Log in to claim
Open graphBrowse works

Research graph

See the researcher in context

Open full explorer

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

20 published item(s)

preprint2022arXiv

Bullshark: DAG BFT Protocols Made Practical

We present Bullshark, the first directed acyclic graph (DAG) based asynchronous Byzantine Atomic Broadcast protocol that is optimized for the common synchronous case. Like previous DAG-based BFT protocols, Bullshark requires no extra communication to achieve consensus on top of building the DAG. That is, parties can totally order the vertices of the DAG by interpreting their local view of the DAG edges. Unlike other asynchronous DAG-based protocols, Bullshark provides a practical low latency fast-path that exploits synchronous periods and deprecates the need for notoriously complex view-change mechanisms. Bullshark achieves this while maintaining all the desired properties of its predecessor DAG-Rider. Namely, it has optimal amortized communication complexity, it provides fairness and asynchronous liveness, and safety is guaranteed even under a quantum adversary. In order to show the practicality and simplicity of our approach, we also introduce a standalone partially synchronous version of Bullshark which we evaluate against the state of the art. The implemented protocol is embarrassingly simple (200 LOC on top of an existing DAG-based mempool implementation (Narwhal & Tusk). It is highly efficient, achieving for example, 125,000 transaction per second with a 2 seconds latency for a deployment of 50 parties. In the same setting the state of the art pays a steep 50% latency increase as it optimizes for asynchrony.

0 citations0 reviewsNo code linkedOpen access
preprint2022arXiv

Bullshark: The Partially Synchronous Version

The purpose of this manuscript is to describe the deterministic partially synchronous version of Bullshark in a simple and clean way. This result is published in CCS 2022, however, the description there is less clear because it uses the terminology of the full asynchronous Bullshark. The CCS version ties the description of the asynchronous and partially synchronous versions of Bullshark since it targets an academic audience. Due to the recent interest in DAG-based BFT protocols, we provide a separate and simple description of the partially synchronous version that targets a more general audience. We focus here on the DAG ordering logic. For more details about the asynchronous version, garbage collection, fairness, proofs, related work, evaluation, and efficient DAG implementation please refer to the fullpaper. An intuitive extended summary can be found in the "DAG meets BFT" blogpost.

0 citations0 reviewsNo code linkedOpen access
preprint2022arXiv

Narwhal and Tusk: A DAG-based Mempool and Efficient BFT Consensus

We propose separating the task of reliable transaction dissemination from transaction ordering, to enable high-performance Byzantine fault-tolerant quorum-based consensus. We design and evaluate a mempool protocol, Narwhal, specializing in high-throughput reliable dissemination and storage of causal histories of transactions. Narwhal tolerates an asynchronous network and maintains high performance despite failures. Narwhal is designed to easily scale-out using multiple workers at each validator, and we demonstrate that there is no foreseeable limit to the throughput we can achieve. Composing Narwhal with a partially synchronous consensus protocol (Narwhal-HotStuff) yields significantly better throughput even in the presence of faults or intermittent loss of liveness due to asynchrony. However, loss of liveness can result in higher latency. To achieve overall good performance when faults occur we design Tusk, a zero-message overhead asynchronous consensus protocol, to work with Narwhal. We demonstrate its high performance under a variety of configurations and faults. As a summary of results, on a WAN, Narwhal-Hotstuff achieves over 130,000 tx/sec at less than 2-sec latency compared with 1,800 tx/sec at 1-sec latency for Hotstuff. Additional workers increase throughput linearly to 600,000 tx/sec without any latency increase. Tusk achieves 160,000 tx/sec with about 3 seconds latency. Under faults, both protocols maintain high throughput, but Narwhal-HotStuff suffers from increased latency.

0 citations0 reviewsNo code linkedOpen access
preprint2022arXiv

Twins: BFT Systems Made Robust

This paper presents Twins, an automated unit test generator of Byzantine attacks. Twins implements three types of Byzantine behaviors: (i) leader equivocation, (ii) double voting, and (iii) losing internal state such as forgetting 'locks' guarding voted values. To emulate interesting attacks by a Byzantine node, it instantiates twin copies of the node instead of one, giving both twins the same identities and network credentials. To the rest of the system, the twins appear indistinguishable from a single node behaving in a 'questionable' manner. Twins can systematically generate Byzantine attack scenarios at scale, execute them in a controlled manner, and examine their behavior. Twins scenarios iterate over protocol rounds and vary the communication patterns among nodes. Twins runs in a production setting within DiemBFT where it can execute 44M Twins-generated scenarios daily. Whereas the system at hand did not manifest errors, subtle safety bugs that were deliberately injected for the purpose of validating the implementation of Twins itself were exposed within minutes. Twins can prevent developers from regressing correctness when updating the codebase, introducing new features, or performing routine maintenance tasks. Twins only requires a thin wrapper over DiemBFT, we thus envision other systems using it. Building on this idea, one new attack and several known attacks against other BFT protocols were materialized as Twins scenarios. In all cases, the target protocols break within fewer than a dozen protocol rounds, hence it is realistic for the Twins approach to expose the problems.

0 citations0 reviewsNo code linkedOpen access
preprint2022arXiv

Zef: Low-latency, Scalable, Private Payments

We introduce Zef, the first Byzantine-Fault Tolerant (BFT) protocol to support payments in anonymous digital coins at arbitrary scale. Zef follows the communication and security model of FastPay: both protocols are asynchronous, low-latency, linearly-scalable, and powered by partially-trusted sharded authorities. Zef further introduces opaque coins represented as off-chain certificates that are bound to user accounts. In order to hide the face values of coins when a payment operation consumes or creates them, Zef uses random commitments and NIZK proofs. Created coins are made unlinkable using the blind and randomizable threshold anonymous credentials of Coconut. To control storage costs associated with coin replay prevention, Zef accounts are designed so that data can be safely removed once an account is deactivated. Besides the specifications and a detailed analysis of the protocol, we are making available an open-source implementation of Zef in Rust. Our extensive benchmarks on AWS confirm textbook linear scalability and demonstrate a confirmation time under one second at nominal capacity. Compared to existing anonymous payment systems based on a blockchain, this represents a latency speedup of three orders of magnitude, with no theoretical limit on throughput.

0 citations0 reviewsNo code linkedOpen access
preprint2021arXiv

Scaling Distributed Ledgers and Privacy-Preserving Applications

This thesis proposes techniques aiming to make blockchain technologies and smart contract platforms practical by improving their scalability, latency, and privacy. This thesis starts by presenting the design and implementation of Chainspace, a distributed ledger that supports user defined smart contracts and execute user-supplied transactions on their objects. The correct execution of smart contract transactions is publicly verifiable. Chainspace is scalable by sharding state; it is secure against subsets of nodes trying to compromise its integrity or availability properties through Byzantine Fault Tolerance (BFT). This thesis also introduces a family of replay attacks against sharded distributed ledgers targeting cross-shard consensus protocols; they allow an attacker, with network access only, to double-spend resources with minimal efforts. We then build Byzcuit, a new cross-shard consensus protocol that is immune to those attacks and that is tailored to run at the heart of Chainspace. Next, we propose FastPay, a high-integrity settlement system for pre-funded payments that can be used as a financial side-infrastructure for Chainspace to support low-latency retail payments. This settlement system is based on Byzantine Consistent Broadcast as its core primitive, foregoing the expenses of full atomic commit channels (consensus). The resulting system has extremely low-latency for both confirmation and payment finality. Finally, this thesis proposes Coconut, a selective disclosure credential scheme supporting distributed threshold issuance, public and private attributes, re-randomization, and multiple unlinkable selective attribute revelations. It ensures authenticity and availability even when a subset of credential issuing authorities are malicious or offline, and natively integrates with Chainspace to enable a number of scalable privacy-preserving applications.

0 citations0 reviewsNo code linkedOpen access
preprint2020arXiv

Coconut: Threshold Issuance Selective Disclosure Credentials with Applications to Distributed Ledgers

Coconut is a novel selective disclosure credential scheme supporting distributed threshold issuance, public and private attributes, re-randomization, and multiple unlinkable selective attribute revelations. Coconut integrates with blockchains to ensure confidentiality, authenticity and availability even when a subset of credential issuing authorities are malicious or offline. We implement and evaluate a generic Coconut smart contract library for Chainspace and Ethereum; and present three applications related to anonymous payments, electronic petitions, and distribution of proxies for censorship resistance. Coconut uses short and computationally efficient credentials, and our evaluation shows that most Coconut cryptographic primitives take just a few milliseconds on average, with verification taking the longest time (10 milliseconds).

0 citations0 reviewsNo code linkedOpen access
preprint2020arXiv

Replay Attacks and Defenses Against Cross-shard Consensus in Sharded Distributed Ledgers

We present a family of replay attacks against sharded distributed ledgers, that target cross-shard consensus protocols, such as the recently proposed Chainspace and Omniledger. They allow an attacker, with network access only, to double-spend or lock resources with minimal efforts. The attacker can act independently without colluding with any nodes, and succeed even if all nodes are honest; most of the attacks can also exhibit themselves as faults under periods of asynchrony. These attacks are effective against both shard-led and client-led cross-shard consensus approaches. Finally, we present Byzcuit - a new cross-shard consensus protocol that is immune to those attacks. We implement a prototype of Byzcuit and evaluate it on a real cloud-based testbed, showing that our defenses impact performance minimally, and overall performance surpasses previous works.

0 citations0 reviewsNo code linkedOpen access
preprint2016arXiv

Elliptic-Curves Cryptography on High-Dimensional Surfaces

We discuss the use of elliptic curves in cryptography on high-dimensional surfaces. In particular, instead of a Diffie-Hellman key exchange protocol written in the form of a bi-dimensional row, where the elements are made up with 256 bits, we propose a key exchange protocol given in a matrix form, with four independent entries each of them constructed with 64 bits. Apart from the great advantage of significantly reducing the number of used bits, this methodology appears to be immune to attacks of the style of Western, Miller, and Adleman, and at the same time it is also able to reach the same level of security as the cryptographic system presently obtained by the Microsoft Digital Rights Management. A nonlinear differential equation (NDE) admitting the elliptic curves as a special case is also proposed. The study of the class of solutions of this NDE is in progress.

0 citations0 reviewsNo code linkedOpen access
preprint2016arXiv

Symmetry Group and Group Representations Associated to the Thermodynamic Covariance Principle (TCP)

We describe the Lie group and the group representations associated to the nonlinear Thermodynamic Coordinate Transformations (TCT). The TCT guarantee the validity of the Thermodynamic Covariance Principle (TCP) : {\it The nonlinear closure equations, i.e. the flux-force relations, everywhere and in particular outside the Onsager region, must be covariant under TCT}. In other terms, the fundamental laws of thermodynamics should be manifestly covariant under transformations between the admissible thermodynamic forces, i.e. under TCT. The TCP ensures the validity of the fundamental theorems for systems far from equilibrium. The symmetry properties of a physical system are intimately related to the conservation laws characterizing that system. Noether's theorem gives a precise description of this relation. We derive the conserved (thermodynamic) currents and, as an example of calculation, a simple system out of equilibrium where the validity of TCP is imposed at the level of the kinetic equations is also analyzed.

0 citations0 reviewsNo code linkedOpen access
preprint2015arXiv

Category theoretic properties of the A. Rényi and C. Tsallis entropies

The problem of embedding the Tsallis and Rényi entropies in the framework of category theory and their axiomatic foundation is studied. To this end, we construct a special category MES related to measured spaces. We prove that both of the Rényi and Tsallis entropies can be imbedded in the formalism of category theory by proving that the same basic functional that appears in their definitions, as well as in the associated Lebesgue space norms, has good algebraic compatibility properties. We prove that this functional is both additive and multiplicative with respect to the direct product and the disjoint sum (the coproduct) in the category MES, so it is a natural candidate for the measure of information or uncertainty. We prove that the category MES can be extended to monoidal category, both with respect to the direct product as well as to the coproduct. The basic axioms of the original Rényi entropy theory are generalized and reformulated in the framework of category MES and we prove that these axioms foresee the existence of an universal exponent having the same values for all the objects of the category MES. In addition, this universal exponent is the parameter, which appears in the definition of the Tsallis and Rényi entropies.

0 citations0 reviewsNo code linkedOpen access
preprint2015arXiv

Determination of the Dynamic ITER Energy Confinement Time Scalings

We derive the differential equation, which is satisfied by the ITER scalings for the dynamic energy confinement time. We show that this differential equation can also be obtained from the differential equation for the energy confinement time, derived from the energy balance equation, when the plasma is near the steady state. We find that the values of the scaling parameters are linked to the second derivative of the power loss, estimated at the steady state. As an example of an application, the solution of the differential equation for the energy confinement time is compared with the profile obtained by solving numerically the balance equations (closed by a transport model) for a concrete Tokamak-plasma.

0 citations0 reviewsNo code linkedOpen access
preprint2015arXiv

The Thermodynamic Covariance Principle

The concept of {\it equivalent systems} from the thermodynamic point of view, originally introduced by Th. De Donder and I. Prigogine, is deeply investigated and revised. From our point of view, two systems are thermodynamically equivalent if, under transformation of the thermodynamic forces, both the entropy production and the Glansdorff-Prigogine dissipative quantity remain unaltered. This kind of transformations may be referred to as the {\it Thermodynamic Coordinate Transformations} (TCT). The general class of transformations satisfying the TCT is determined. We shall see that, also in the nonlinear region ({\it i.e.}, out of the Onsager region), the TCT preserve the reciprocity relations of the transformed transport matrix. The equivalent character of two transformations under TCT, leads to the concept of {\it Thermodynamic Covariance Principle} (TCP) stating that all thermodynamic equations involving the thermodynamic forces and flows ({\it e.g.}, the closure flux-force relations) should be covariant under TCT.

0 citations0 reviewsNo code linkedOpen access
preprint2014arXiv

Stationary distribution functions for Tokamak-plasmas in the weak-collisional transport regime by MaxEnt principle

In previous works, we derived stationary density distribution functions (DDF) where the local equilibrium is determined by imposing the maximum entropy (MaxEnt) principle, under the scale invariance restrictions, and the minimum entropy production theorem. In this paper we demonstrate that it is possible to reobtain these DDF solely from the MaxEnt principle subject to suitable scale invariant restrictions in all the variables. For the sake of concreteness, we analyze the example of ohmic, fully ionized, tokamak-plasmas, in the weak-collisional transport regime. In this case we show that it is possible to reinterpret the stationary distribution function in terms of the Prigogine distribution function where the logarithm of the DDF is directly linked to the entropy production of the plasma. This leads to the suggestive idea that also the stationary neoclassical distribution functions, for magnetically confined plasmas in the collisional transport regimes, may be derived solely by the MaxEnt principle.

0 citations0 reviewsNo code linkedOpen access
preprint2014arXiv

The Rényi entropy of Lévy distribution

The equivalence between non-extensive C. Tsallis entropy and the extensive entropy introduced by Alfréd Rényi is discussed. The Rényi entropy is studied from the perspective of the geometry of the Lebesgue and generalised, exotic Lebesgue spaces. A duality principle is established. The Rényi entropy for the Lévy distribution, in the domain when the nunerical methods fails, is approximated by asymptotic expansion for the large values of the Rényi parameter.

0 citations0 reviewsNo code linkedOpen access
preprint2013arXiv

Derivation of Reference Distribution Functions for Tokamak-plasmas by Statistical Thermodynamics

A general approach for deriving the expression of reference distribution functions by statistical thermodynamics is illustrated, and applied to the case of a magnetically confined plasma. The local equilibrium is defined by imposing the minimum entropy production, which applies only to the linear regime near a stationary thermodynamically non-equilibrium state and the maximum entropy principle under the scale invariance restrictions. This procedure may be adopted for a system subject to an arbitrary number of thermodynamic forces, however, for concreteness, we analyze, afterwords, a magnetically confined plasma subject to three thermodynamic forces, and three energy sources: i) the total Ohmic heat, supplied by the transformer coil, ii) the energy supplied by Neutral Beam Injection (NBI), and iii) the RF energy supplied by Ion Cyclotron Resonant Heating (ICRH) system which heats the minority population. In this limit case, we show that the derived expression of the distribution function is more general than that one, which is currently used for fitting the numerical steady-state solutions obtained by simulating the plasma by gyro-kinetic codes. An application to a simple model of fully ionized plasmas submitted to an external source is discussed. Through kinetic theory, we fixed the values of the free parameters linking them with the external power supplies. The singularity at low energy in the proposed distribution function is related to the intermittency in the turbulent plasma.

0 citations0 reviewsNo code linkedOpen access
preprint2013arXiv

Family of Probability Distributions Derived from Maximal Entropy Principle with Scale Invariant Restrictions

Using statistical thermodynamics, we derive a general expression of the stationary probability distribution for thermodynamic systems driven out of equilibrium by several thermodynamic forces. The local equilibrium is defined by imposing the minimum entropy production and the maximum entropy principle under the scale invariance restrictions. The obtained probability distribution presents a singularity that has immediate physical interpretation in terms of the intermittency models. The derived reference probability distribution function is interpreted as time and ensemble average of the real physical one. A generic family of stochastic processes describing noise-driven intermittency, whose stationary density distribution coincides exactly with the one resulted from entropy maximization, is presented.

0 citations0 reviewsNo code linkedOpen access
preprint2013arXiv

Reference Distribution Functions for Magnetically Confined Plasmas from the Minimum Entropy Production Theorem and the MaxEnt Principle, subject to the Scale-Invariant Restrictions

We derive the expression of the reference distribution function for magnetically confined plasmas far from the thermodynamic equilibrium. The local equilibrium state is fixed by imposing the minimum entropy production theorem and the maximum entropy (MaxEnt) principle, subject to scale invariance restrictions. After a short time, the plasma reaches a state close to the local equilibrium. This state is referred to as the reference state. The aim of this letter is to determine the reference distribution function (RDF) when the local equilibrium state is defined by the above mentioned principles. We prove that the RDF is the stationary solution of a generic family of stochastic processes corresponding to an universal Landau-type equation with white parametric noise. As an example of application, we consider a simple, fully ionized, magnetically confined plasmas, with auxiliary Ohmic heating. The free parameters are linked to the transport coefficients of the magnetically confined plasmas, by the kinetic theory.

0 citations0 reviewsNo code linkedOpen access
preprint2012arXiv

Rotation of Tokamak-Plasmas out of Mechanical Equilibria, in Absence of External Torques

Rotation of tokamak-plasmas, not at the mechanical equilibrium, is investigated utilizing a theorem of thermodynamics, established by Prigogine. This theorem, suitably applied to toroidally confined plasmas, suggests that the global barycentric rotations of the plasma, in the toroidal and poloidal directions, are pure reversible processes. In case of negligible viscosity and by supposing the validity of the balance equation for the internal forces, we show that the plasma, even not in the mechanical equilibrium, may freely rotate as a rigid body in the toroidal direction with an angular frequency with an angular frequency, which may be higher than the neoclassical estimation. In addition, its toroidal rotation may cause the plasma to rotate globally in the poloidal direction at a speed faster than the expression found by the neoclassical theory. The eventual configuration is attained when the toroidal and poloidal angular frequencies reaches the values that minimize dissipation.

0 citations0 reviewsNo code linkedOpen access