Abstract:In a multi-party fair coin-flipping protocol, the parties output a common (close to) unbiased bit, even when some adversarial parties try to bias the output. In this work we focus on the case of an arbitrary number of corrupted parties. Cleve [STOC 1986] has shown that in any such $m$-round coin-flipping protocol, the corrupted parties can bias the honest parties' common output bit by $\Theta(1/m)$. For more than two decades, the best known coin-flipping protocol was the one of Awerbuch et al. [Manuscript 1985], who presented a $t$-party, $m$-round protocol with bias $\Theta(t/\sqrt{m})$. This was changed by the breakthrough result of Moran et al. [TCC 2009], who constructed an $m$-round, two-party coin-flipping protocol with optimal bias $\Theta(1/m)$. Haitner and Tsfadia [STOC 2014] constructed an $m$-round, three-party coin-flipping protocol with bias $O(\log^3m / m)$. Still for the case of more than three parties, the best known protocol remained the $\Theta(t/\sqrt{m})$-bias protocol of Awerbuch et al. We make a step towards eliminating the above gap, presenting a $t$-party, $m$-round coin-flipping protocol, with bias $O(\frac{t^4 \cdot 2^t \cdot \sqrt{\log m}}{m^{1/2+1/\left(2^{t-1}-2\right)}})$ for any $t\le \tfrac12 \log\log m$. This improves upon the $\Theta(t/\sqrt{m})$-bias protocol of Awerbuch et al., and in particular, for $t\in O(1)$ it is an $1/m^{\frac12 + \Theta(1)}$-bias protocol. For the three-party case, it is an $O(\sqrt{\log m}/m)$-bias protocol, improving over the $O(\log^3m / m)$-bias protocol of Haitner and Tsfadia. Our protocol generalizes that of Haitner and Tsfadia, by presenting an appropriate recovery protocol for the remaining parties to interact in, in the case that some parties abort or are caught cheating. We prove the fairness of the new protocol by presenting a new paradigm for analyzing fairness of coin-flipping protocols.

How to Lose with Least Probability

Belief Function to Probability: A Tradeoff Between Easy Decision-Making and High Risk

Exact edge landing probability for the bouncing coin toss and the three-sided die problem

Note on a Coin Tossing Problem Posed by Daniel Litt

Choosing 1 of N with and without lucky numbers

Simulating a die roll by flipping two coins

How to Answer Questions of the Type: If you toss a coin n times, how likely is HH to show up more than HT?

On maximizing the number of heads when you need to set aside at least one coin every round

A Fair Shake: How close can the sum of $n$-sided dice be to a uniform distribution?

Square++: Making a connection game win-lose complementary and playing-fair

Winning Without Observing Payoffs: Exploiting Behavioral Biases to Win Nearly Every Round

Fairly Random: The Impact of Winning the Toss on the Probability of Winning

A proof that HT is more likely to outnumber HH than vice versa in a sequence of n coin flips

The Electromagnetic Balance Game: A Probabilistic Perspective

On cases where Litt's game is fair

Fair Coin Flipping: Tighter Analysis and the Many-Party Case

Fair coins tend to land on the same side they started: Evidence from 350,757 flips

Dynamics and Probability in the Toss of a Coin with Symmetric Inhomogeneous Density

Sun Bin's Legacy

Gambler's Ruin? Some Aspects of Coin Tossing

Rational Decision-Making Under Uncertainty: Observed Betting Patterns on a Biased Coin