2025-11-19T17:40:14.815126

Adding All Flavors: A Hybrid Random Number Generator for dApps and Web3

Chodavarapu, Karanjai, Fan et al.

Random numbers play a vital role in many decentralized applications (dApps), such as gaming and decentralized finance (DeFi) applications. Existing random number provision mechanisms can be roughly divided into two categories, on-chain, and off-chain. On-chain approaches usually rely on the blockchain as the major input and all computations are done by blockchain nodes. The major risk for this type of method is that the input itself is susceptible to the adversary's influence. Off-chain approaches, as the name suggested, complete the generation without the involvement of blockchain nodes and share the result directly with a dApp. These mechanisms usually have a strong security assumption and high complexity. To mitigate these limitations and provide a framework that allows a dApp to balance different factors involved in random number generation, we propose a hybrid random number generation solution that leverages IoT devices equipped with trusted execution environment (TEE) as the randomness sources, and then utilizes a set of cryptographic tools to aggregate the multiple sources and obtain the final random number that can be consumed by the dApp. The new approach only needs one honest random source to guarantee the unbiasedness of the final random number and a user can configure the system to tolerate malicious participants who can refuse to respond to avoid unfavored results. We also provide a concrete construction that can further reduce the on-chain computation complexity to lower the cost of the solution in practice. We evaluate the computation and gas costs to demonstrate the effectiveness of the improvement.

academic

Adding All Flavors: A Hybrid Random Number Generator for dApps and Web3

基本信息

论文ID: 2510.12062
标题: Adding All Flavors: A Hybrid Random Number Generator for dApps and Web3
作者: Ranjith Chodavarapu (Kent State University), Rabimba Karanjai (University Of Houston), Xinxin Fan (IoTex), Weidong Shi (University Of Houston), Lei Xu (Kent State University)
分类: cs.CR (Cryptography and Security)
发表时间: 2024年10月20日
论文链接: https://arxiv.org/abs/2510.12062v1

摘要

随机数在去中心化应用（dApps）中发挥着至关重要的作用，特别是在游戏和去中心化金融（DeFi）应用中。现有的随机数生成机制大致可分为链上和链下两类。链上方法通常依赖区块链作为主要输入源，但面临输入易被对手影响的风险；链下方法虽然不依赖区块链节点，但通常具有强安全假设和高复杂性。为了缓解这些限制，本文提出了一种混合随机数生成解决方案HRNG，利用配备可信执行环境（TEE）的IoT设备作为随机性源，并使用一套密码学工具聚合多个源以获得最终随机数。该方法仅需一个诚实的随机源即可保证最终随机数的无偏性，并可配置系统以容忍恶意参与者的拒绝服务攻击。