1. The Honey Badger of BFT Protocols 2016 BFT Blockchains CCS
    Andrew Miller, Yu Xia, Kyle Croman, Elaine Shi, Dawn Song
    [View PDF on eprint.iacr.org]
    [Show BibTex Citation]

    author = {Andrew Miller and
    Yu Xia and
    Kyle Croman and
    Elaine Shi and
    Dawn Song},
    editor = {Edgar R. Weippl and
    Stefan Katzenbeisser and
    Christopher Kruegel and
    Andrew C. Myers and
    Shai Halevi},
    title = {The Honey Badger of {BFT} Protocols},
    booktitle = {Proceedings of the 2016 {ACM} {SIGSAC} Conference on Computer and
    Communications Security, Vienna, Austria, October 24-28, 2016},
    pages = {31--42},
    publisher = {{ACM}},
    year = {2016},
    url = {https://doi.org/10.1145/2976749.2978399},
    doi = {10.1145/2976749.2978399},
    timestamp = {Mon, 29 Jul 2019 16:00:13 +0200},
    biburl = {https://dblp.org/rec/bib/conf/ccs/MillerXCSS16},
    bibsource = {dblp computer science bibliography, https://dblp.org}

The surprising success of cryptocurrencies has led to a surge of interest in deploying large scale, highly robust, Byzantine fault tolerant (BFT) proto- cols for mission-critical applications, such as finan- cial transactions. Although the conventional wisdom is to build atop a (weakly) synchronous protocol such as PBFT (or a variation thereof), such protocols rely critically on network timing assumptions, and only guarantee liveness when the network behaves as ex- pected. We argue these protocols are ill-suited for this deployment scenario.

We present an alternative, HoneyBadgerBFT, the first practical asynchronous BFT protocol, which guarantees liveness without making any timing as- sumptions. We base our solution on a novel atomic broadcast protocol that achieves optimal asymptotic efficiency. We present an implementation and ex- perimental results to show our system can achieve throughput of tens of thousands of transactions per second, and scales to over a hundred nodes on a wide area network. We even conduct BFT experi- ments over Tor, without needing to tune any parame- ters. Unlike the alternatives, HoneyBadgerBFT sim- ply does not care about the underlying network.