So ethereum goes for RANDAO. The disadvantage with randao is that the last validator in the commit-reveal scheme is able to hold his contributed value back and thereby influence the random outcome. Ethereum is trying to overcome this by using verifiable delay functions.

Why all that hassle? Why not just go for threshold signatures like Dfinity? What's the drawback?

Some link to a statement from Vitalik Buterin on this would be higly appreciated. Otherwise if you can explain it it's also fine

  • I know Randao exists, but does anyone actually use it for high-value applications? It isn't very secure for values above the mining reward, which is expected to decrease – nick carraway Apr 4 '19 at 15:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.