Blockchain protocols typically aspire to run in the permissionless setting, in which nodes are owned and operated by a large number of diverse and unknown entities, with each node free to start or stop running the protocol at any time. This setting is more challenging than the traditional permissioned setting, in which the set of nodes that will be running the protocol is fixed and known at the time of protocol deployment. The goal of this paper is to provide a framework for reasoning about the rich design space of blockchain protocols and their capabilities and limitations in the permissionless setting. This paper offers a hierarchy of settings with different "degrees of permissionlessness", specified by the amount of knowledge that a protocol has about the current participants: These are the fully permissionless, dynamically available and quasi-permissionless settings. The paper also proves several results illustrating the utility of our analysis framework for reasoning about blockchain protocols in these settings. For example: (1) In the fully permissionless setting, even with synchronous communication and with severe restrictions on the total size of the Byzantine players, every deterministic protocol for Byzantine agreement has an infinite execution. (2) In the dynamically available and partially synchronous setting, no protocol can solve the Byzantine agreement problem with high probability, even if there are no Byzantine players at all. (3) In the quasi-permissionless and partially synchronous setting, by contrast, assuming a bound on the total size of the Byzantine players, there is a deterministic protocol guaranteed to solve the Byzantine agreement problem in a finite amount of time. (4) In the quasi-permissionless and synchronous setting, every proof-of-stake protocol that does not use advanced cryptography is vulnerable to long-range attacks.
翻译:区块链协议通常旨在无许可环境下运行,在该环境中,节点由大量多样且未知的实体拥有和操作,每个节点可随时自由启动或停止运行协议。这一环境比传统许可环境更具挑战性——在许可环境中,运行协议的节点集合在协议部署时即固定且已知。本文旨在提供一个框架,用以分析区块链协议在无许可环境中的丰富设计空间及其能力与局限性。本文提出了一种具有不同“无许可程度”的环境层次结构,该结构由协议对当前参与者的知识量决定:这些环境包括完全无许可、动态可用和准无许可环境。本文还证明了若干结果,展示了我们的分析框架在上述环境中对区块链协议推演的有效性。例如:(1) 在完全无许可环境下,即使采用同步通信并严格限制拜占庭参与者的总规模,每个用于拜占庭共识的确定性协议都会产生无限执行过程。(2) 在动态可用且部分同步环境下,即使完全没有拜占庭参与者,任何协议都无法以高概率解决拜占庭共识问题。(3) 相比之下,在准无许可且部分同步环境下,假设拜占庭参与者总规模存在上限,则存在一个确定性协议能够在有限时间内保证解决拜占庭共识问题。(4) 在准无许可且同步环境下,所有未使用高级密码学的权益证明协议都易受远程攻击。