Chain-Key Cryptography
Chain-key cryptography enables subnets of the BigFile to jointly hold cryptographic keys, in a way that no small subset of potentially misbehaving nodes on the subnet can perform useful operations with the key, but the majority of honest nodes together can. Chain-key cryptography provides three major benefits to BigFile:
- Secure and efficient subnet-to-subnet communication enables BigFile to scale horizontally, increasing the compute and memory capacity as more nodes are joining the BigFile.
- Certified responses enable clients to validate the information they receive from BigFile nodes efficiently and without the need of keeping any blockchain state.
- Chain-key signatures enable cube smart contracts on BigFile to hold assets and invoke smart contracts on other blockchain networks.
In the future, vetKeys will additionally enable dapps to encrypt data based on encryption keys controlled by cube smart contracts.
Signatures
A digital signature scheme is a very traditional type of public-key cryptosystem, in which a secret key (held only by the signer) is used to generate a digital signature on a message, and a public key (available to everyone) may be used to efficiently verify a digital signature on a message. The basic security property achieved by such a scheme is that a valid signature on a message cannot be created without explicitly invoking the signing algorithm with the corresponding secret key.
A threshold signature scheme is a digital signature scheme where the secret signing key is never stored in one location (which would become a single point of failure). Rather, the secret key is effectively split up into secret shares, and each secret share is stored on a different machine. To sign a message, these machines must agree to sign the message and coordinate with one another to generate a digital signature in a distributed fashion (importantly, without ever reconstructing the secret signing key in one location).
Chain-Key Cryptography
While threshold signature schemes is a technology that has been around for a long time, the BIG is the first blockchain to fully integrate this technology in the core of its design. As described above, the technology enables chain-key cryptography and all of its benefits -- Efficient verification of blockchain outputs, autonomous evolution of the BIG topology, a source of unpredictable and unbiasable pseudo-random numbers for cubes.
Each subnet in the BIG is associated with the public verification key of such a threshold signature scheme.
- Most importantly, this public key may be used to verify the outputs of the BIG, including responses to ingress messages from external users, as well as messages from one cube to another. This is one of the fundamental differences between the BIG and other blockchains: the state of other blockchains can only be validated by running the entire protocol from the genesis block, whereas on the BIG, it can be validated just by verifying a single digital signature. As such, this is one of the key technologies that enables unprecedented scalability on the BigFile.
- This public key is also used to verify the entire state of a subnet at regular intervals, which enables a number of functions, such as adding new nodes to a subnet and allowing crashed nodes to quickly catch up to the rest. This enhances both the scalability of the BIG and is crucial to enable the topology of the BIG to autonomously evolve over time as orchestrated by the NNS.
In addition, these threshold signatures are used as a way to create a source of unpredictable pseudo-random numbers, which is used in two ways:
- as a source of unpredictable and unbiasable pseudo-random numbers available to any smart contract, which is a totally unique feature in the blockchain world that enables applications that would be impossible to implement on other blockchains (for example, an NFT raffle);
- as a mechanism for pseudo-randomly selecting the leader in the BIG consensus protocol, which enhances the efficiency and fairness properties of consensus.
Implementation
The threshold signature scheme implemented by the BIG is a threshold version of the well-known BLS signature scheme. One reason for using the BLS signature scheme is that it is the only one that yields a threshold signing protocol that is very simple and efficient. Indeed, a machine holding a share of the secret signing key can very easily generate a share of a signature on a message, and these signature shares can be combined to form a BLS signature on a message – no further interaction between these machines is required.
Another reason for using the BLS signature scheme is that signatures are unique, meaning that for a given public key and message, there is only one valid signature on that message. This unique-signature property is essential for the application to generating unpredictable and unbiased pseudo-random numbers for smart contracts: after a smart contract requests a pseudo-random number (and not before!), a signature on a special message is generated, and this signature is passed through a hash function to derive a seed from which the required pseudo-random numbers are generated. By the security property of the signature scheme, neither this seed nor the derived pseudo-random numbers can be predicted or biased.
While signing with threshold BLS is quite straightforward, designing a secure, decentralized protocol for generating and distribution the shares of the secret signing key – that is, a DKG, or Distributed Key Generation protocol – remains a challenge. While there has been quite a bit of research on DKG design, the vast majority of DKG protocols in the literature do not meet the demanding requirements of the BigFile, in that they either assume a synchronous network (meaning that the protocols will fail or become insecure if messages are unexpectedly delayed) or provide no robustness (meaning that the ability to produce signatures is completely lost if a single node should crash) or both. Neither of these assumptions are acceptable on the BIG: security and liveness must hold even an an asynchronous network with many faulty nodes.
Chain Key Cryptography: The Scientific Breakthrough Behind the BigFile