Can Verifiable Delay Functions Be Based on Random Oracles?
Mohammad Mahmoody, Caleb Smith, David J. Wu · DROPS (Schloss Dagstuhl – Leibniz Center for Informatics) · 2020
Boneh, Bonneau, Bünz, and Fisch (CRYPTO 2018) recently introduced the notion of a verifiable delay function (VDF). VDFs are functions that take a long sequential time T to compute, but whose outputs y := Eval(x) can be efficiently verified (possibly given a proof π) in time t ≪ T (e.g., t = poly(λ, log T) where λ is the security parameter). The first security requirement on a VDF, called uniqueness, is that no polynomial-time algorithm can find a convincing proof π' that verifies for an input x and a different output y' ≠ y. The second security requirement, called sequentiality, is that no polynomial-time algorithm running in time σ T-(T)/(2t) for a concrete verification time t.