Is it possible for devices on an online group chat to toss a coin without trusting each other and the server?
Is it possible for devices on an online group chat to toss a coin without trusting each other and the server?
You're viewing a single thread.
All participants select their own random whole number and publish it to the group. All participants add all the numbers together. The result is either odd or even (heads/tails) and everyone arrives at the same result independently.
The last person to send the number decide the outcome
It doesn't have to be addition. It could be a hash function, etc.
The last person would still decide the outcome. They could keep choosing values for whatever function until it produces their desired result and then post that.
What you would want instead is for everyone to post a (salted) hash, and after the hashes are posted, reveal what the original numbers were and then publicly add them. Everyone could verify everyone else's numbers against those hashes.
Could you do it in 2 phases? First, everyone selects a random partner and exchanges their random number. Each pair then has a result that is locked in. Then everyone submits their result to be summed up as already suggested (Pos/neg = heads/tails).
If there are an uneven number of players, then one player makes a three-some.
I think you run into other issues, depending on OP's meaning of "untrusted." If people are paired off, whoever is in the last group to report can control the outcome. Either if there is a risk of collusion within the group or if one member doesn't like what the outcome is going to be they can claim whichever of them is reporting the group outcome is lying, or the person reporting actuality could lie.
I think this vulnerability will come up most of the time when information is shared with only part of the group and not the entire group.
The risk of a pair collision should be mitigated by all pairings being random. And both pairs announce they pair with so that they can't lie.
But collusion is possible if they happen to pair with another cheater which is not guaranteed unless every is a cheater.
How do you do fair random pairing, though? If you are able to safely do that randomly, you might as well use that same method to do the random flip.
Edit: And even ignoring collusion, there's still the issue of lying (or lying about lying). Only one of a pair would need to be a cheater for the system to fail, if the rest of the group is unable to determine which is the cheater.
Any solution we come up with can probably be used to just decide the answer anyway.
How about, every player puts in a token to say I'm going to play. Then every player plays an encrypted answer. Once every player has answered they each reveal the key to unlock their answer to every player. Everyone then sees the overall answer at the same time.
I think that would work, and that's essentially what I was trying to say when I'd said
What you would want instead is for everyone to post a (salted) hash, and after the hashes are posted, reveal what the original numbers were and then publicly add them. Everyone could verify everyone else's numbers against those hashes.
comment, as well as my other https://beehaw.org/comment/3531769
Yeah you've been more technical than me.
If the function is known by all parties then the last person to send still has control