RANDAO-based RNG: Last Revealer Attacks in Ethereum 2.0 Randomness and a Potential Solution

Do Hai Son,Tran Thi Thuy Quynh,Le Quang Minh
2024-03-15
Abstract:Ethereum 2.0 is a major upgrade to improve its scalability, throughput, and security. In this version, RANDAO is the scheme to randomly select the users who propose, confirm blocks, and get rewards. However, a vulnerability, referred to as the `Last Revealer Attack' (LRA), compromises the randomness of this scheme by introducing bias to the Random Number Generator (RNG) process. This vulnerability is first clarified again in this study. After that, we propose a Shamir's Secret Sharing (SSS)-based RANDAO scheme to mitigate the LRA. Through our analysis, the proposed method can prevent the LRA under favorable network conditions.
Cryptography and Security
What problem does this paper attempt to address?
The paper primarily focuses on the issue of the "Last Revealer Attack" (LRA) in the random number generation (RANDAO) mechanism of Ethereum 2.0 and proposes a solution based on Shamir's Secret Sharing (SSS). Specifically, the paper first introduces the relevant background of Ethereum 2.0 and the importance of the transition from Proof-of-Work (PoW) to Proof-of-Stake (PoS). In the PoS mechanism, validators gain the right to propose new blocks by staking assets. The RANDAO mechanism is used to randomly select these validators, but it has a vulnerability—LRA, where attackers can exploit this vulnerability to influence the random number generation process, thereby manipulating the order of validator selection. To address this issue, the authors propose an improved RANDAO scheme based on Shamir's Secret Sharing algorithm. This scheme involves splitting the digital signature into multiple shares and distributing them to other validators after encryption, making it impossible for the last validator to predict or manipulate the final random number result. This method can prevent LRA attacks to a certain extent, especially under good network conditions. In summary, this paper aims to enhance the security of the RANDAO mechanism by introducing the SSS algorithm, thereby improving the randomness and attack resistance of Ethereum 2.0.