Abstract:In a multi-party fair coin-flipping protocol, the parties output a common (close to) unbiased bit, even when some adversarial parties try to bias the output. In this work we focus on the case of an arbitrary number of corrupted parties. Cleve [STOC 1986] has shown that in any such $m$-round coin-flipping protocol, the corrupted parties can bias the honest parties' common output bit by $\Theta(1/m)$. For more than two decades, the best known coin-flipping protocol was the one of Awerbuch et al. [Manuscript 1985], who presented a $t$-party, $m$-round protocol with bias $\Theta(t/\sqrt{m})$. This was changed by the breakthrough result of Moran et al. [TCC 2009], who constructed an $m$-round, two-party coin-flipping protocol with optimal bias $\Theta(1/m)$. Haitner and Tsfadia [STOC 2014] constructed an $m$-round, three-party coin-flipping protocol with bias $O(\log^3m / m)$. Still for the case of more than three parties, the best known protocol remained the $\Theta(t/\sqrt{m})$-bias protocol of Awerbuch et al. We make a step towards eliminating the above gap, presenting a $t$-party, $m$-round coin-flipping protocol, with bias $O(\frac{t^4 \cdot 2^t \cdot \sqrt{\log m}}{m^{1/2+1/\left(2^{t-1}-2\right)}})$ for any $t\le \tfrac12 \log\log m$. This improves upon the $\Theta(t/\sqrt{m})$-bias protocol of Awerbuch et al., and in particular, for $t\in O(1)$ it is an $1/m^{\frac12 + \Theta(1)}$-bias protocol. For the three-party case, it is an $O(\sqrt{\log m}/m)$-bias protocol, improving over the $O(\log^3m / m)$-bias protocol of Haitner and Tsfadia. Our protocol generalizes that of Haitner and Tsfadia, by presenting an appropriate recovery protocol for the remaining parties to interact in, in the case that some parties abort or are caught cheating. We prove the fairness of the new protocol by presenting a new paradigm for analyzing fairness of coin-flipping protocols.

Fair Computation with Tit-for-Tat Strategy

Achieving Fairness by Sequential Equilibrium in Rational Two-Party Computation under Incomplete Information

Fair Two-Party Computation with Rational Parties Holding Private Types

Complete Characterization of Fairness in Secure Two-Party Computation of Boolean Functions

Toward Fairness of Cryptocurrency Payments.

Secure multi-party computation with legally-enforceable fairness

Combination with anti-tit-for-tat remedies problems of tit-for-tat

Fairness in Secure Computing Protocols Based on Incentives

From Fairness to Full Security in Multiparty Computation

Rational Adversary with Flexible Utility in Secure Two-Party Computation

Optimal Fair Computation

Fast Two-Output Secure Computation with Optimal Error Probability

Fair Coin Flipping: Tighter Analysis and the Many-Party Case

Secure Multiparty Computation with Partial Fairness

A Gradual and Optimistic Fair Exchange Protocol

Rational Secure Two-party Computation in Social Cloud.

Secure "ratio" Computation and Efficient Protocol for General Secure Two-Party Comparison

A rational and reliable model for outsourcing polynomial two-party computation

Pessimism of the Will, Optimism of the Intellect: Fair Protocols with Malicious but Rational Agents

Fair Secure Computation with Reputation Assumptions in the Mobile Social Networks.

An Almost-Optimally Fair Three-Party Coin-Flipping Protocol