Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

Towards Encrypted Mempools from Threshold IBE without Batching

Дата публикации: 20-09-2026 17:05:10

Nice post! I think exploring designs without batch decryption is a useful direction, and I appreciate the detailed discussion of the design choices and tradeoffs.
Reading the design, I have a concern regarding rejected payloads, if I interpret the following passage correctly:
GottfriedHerold:
If the etx_seen bitfield of the block with rejected payload was valid, then the next (hopefully non-empty) block B' must contain the exact same etx_seen bitfield. Otherwise, it behaves like a missed slot, i.e., B' must decrypt and execute those transactions ToB, whose tickets are in B's grandparent and whose etx_seen bitfield is in B's parent block.
Observe that the key that is to be released in B' is actually the same as the one that may have been released in B. If it was already released in B, then the etx_seen bitfield in B must have been valid, so the etx_seen bitfield in B' must be the same and the builder of B' cannot choose it depending on sk_id and the transactions that can be decrypted with it.
It seems as if the payload of B' (the recovery payload) executes only the transactions intended for the failed payload, while carrying forward etx_seen for those whose key may already have been released during the slot of B. In LUCID, we execute both the decrypted transactions intended for the failed payload and those intended for the next payload together ToB, older first. It seems to me that this should also be incorporated here.
While the new tickets introduced in B can be invalidated, there are still transactions intended for execution in the slot of B, as well as transactions whose key may have been released during that slot. Their tickets were included in B's grandparent and parent, respectively, so knowing that their ticket-carrying payloads were valid does not prevent this overlap. Preserving etx_seen fixes the selection, but if the transactions selected by etx_seen in B are postponed after their key is public, ordinary transactions in the recovery payload can be chosen with knowledge of the plaintexts and frontrun them (failure case A). I would therefore adapt the recovery logic from LUCID, including capacity for executing all of these transactions together.

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1Mempool Account Transaction Capacity from Historical Activity (MATCHA)09.3822-09-2026
2EIP-8184: LUCID encrypted mempool08.4414-08-2026
3Cryptographic canaries and backups08.7718-09-2026
4ERC-8340: Transaction Metadata Encoding034.2115-07-2026
5Preserving censorship resistance for BAL data in EIP-799906.6214-08-2026
6Encrypt The Mempool #7, July 22, 2026025.2320-07-2026
7Timelock Account recovery: A trust minimized recovery system for Smart Accounts06.2214-07-2026
8ERC-8100: Representable Contract State0508-07-2026
9EIP-8146: Block Access List Sidecars0610-07-2026
10EIP-7906: Transaction Assertions via State Diff Opcode0308-07-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 11.77. Источник: ethresear.ch.