<oembed><type>rich</type><version>1.0</version><title>Erik Aronesty [ARCHIVE] wrote</title><author_name>Erik Aronesty [ARCHIVE] (npub1y2…5taj0)</author_name><author_url>https://yabu.me/npub1y22yec0znyzw8qndy5qn5c2wgejkj0k9zsqra7kvrd6cd6896z4qm5taj0</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>📅 Original date posted:2021-05-17&#xA;📝 Original message:Verifiable Delay Functions involve active participation of a single&#xA;verifier.   Without this a VDF decays into a proof-of-work (multiple&#xA;verifiers === parallelism).&#xA;&#xA;The verifier, in this case is &#34;the bitcoin network&#34; taken as a whole.&#xA; I think it is reasonable to consider that some difficult-to-game&#xA;property of the last N blocks (like the hash of the last 100&#xA;block-id&#39;s or whatever), could be the verification input.&#xA;&#xA;The VDF gets calculated by *every* eligible proof-of-burn miner, and&#xA;then this is used to prevent a timing issue.&#xA;&#xA;Seems reasonable to me, but I haven&#39;t looked too far into the&#xA;requirements of VDF&#39;s&#xA;&#xA;nice summary for anyone who is interested:&#xA;https://medium.com/@djrtwo/vdfs-are-not-proof-of-work-91ba3bec2bf4&#xA;&#xA;While VDF&#39;s almost always lead to a &#34;cpu-speed monopoly&#34;, this would&#xA;only be helpful for block latency in a proof-of-burn chain.  Block&#xA;height would be calculated by eligible-miner-burned-coins, so the&#xA;monopoly could be easily avoided.&#xA;&#xA;There has been some decent earlier work on blind/uncensorable burns:&#xA;https://eprint.iacr.org/2019/1096.pdf&#xA;&#xA;A miner could then reveal A) the VDF and B) proof-of-burn as a part of&#xA;a block.  Nodes would simply select the block with A) a valid VDF and&#xA;B) the highest &#34;qualified&#34; POB.&#xA;&#xA;With most burns running at a loss, and no way to predict the next&#xA;&#34;winning burn&#34;, and the VDF providing timing, I&#39;m not sure how this is&#xA;worse than Bitcoin&#39;s existing system.&#xA;&#xA;On Mon, May 10, 2021 at 5:51 PM Jeremy &lt;jlrubin at mit.edu&gt; wrote:&#xA;&gt;&#xA;&gt; re: 2, there&#39;s been some promising developments with Verifiable Delay Functions that make me think that the block regulation problems are solvable without requiring brute-force search proof of work. Are those inapplicable for some reason?&#xA;&gt;</html></oembed>