how to use bitcoin to play decentralized poker.pdfVIP

How to Use Bitcoin to Play Decentralized Poker Ranjit Kumaresan Tal Moran Iddo Bentov MIT IDC Herzliya Technion ranjit@ talm@idc.ac.il idddo@cs.technion.ac.il ABSTRACT Categories and Subject Descriptors Back and Bentov (arXiv 2014) and Andrychowicz et al. (Security C.2.0 [Computer-Communication Networks]: General—Secu- and Privacy 2014) introduced techniques to perform secure multi- rity and protection party computations on Bitcoin. Among other things, these works constructed lottery protocols that ensure that any party that aborts Keywords after learning the outcome pays a monetary penalty to all other par- ties. Following this, Andrychowicz et al. (Bitcoin Workshop 2014) Secure Computation; Bitcoin; Smart Contracts; Markets; Poker. and concurrently Bentov and Kumaresan (Crypto 2014) extended the solution to arbitrary secure function evaluation while guaran- 1. INTRODUCTION teeing fairness in the following sense: any party that aborts after learning the output pays a monetary penalty to all parties that did not learn the output. Andrychowicz et al. (Bitcoin Workshop 2014) Once there were two “mental chess” experts who had also suggested extending to scenarios where parties receive a pay- become tired of their favorite pastime. Let’s play “men- off according to the output of a secure function evaluation, and out- tal poker” for some variety suggested one. “Sure”