Understanding Blockchain and DLT Features
Understanding Blockchain and DLT Features
Features:
1. Blockchain: In this type of DLT, transactions are stored in the form chain of
blocks and each block produces a unique hash that can be used as proof of
valid transactions. Each node has a copy of the ledger which makes it more
transparent.
2. Directed Acyclic Graphs (DAG): This uses a different data structure to
organize the data that brings more consensus. In this type of DLT, validation
of transactions mostly requires the majority of support from the nodes in the
network. Every node on the network has to provide proof of transactions on
the ledger and then can initiate transactions. In this nodes have to verify at
least two of the previous transactions on the ledger to confirm their
transaction.
3. Hashgraph: In this type of DLT, records are stored in the form of a directed
acyclic graph. It uses a different consensus mechanism, using virtual voting
as the form consensus mechanism for gaining network consensus. Hence
nodes do not have to validate each transaction on the network.
4. Holochain: Holochain is termed as the next level of blockchain by some
people because it is much more decentralized than blockchain. It is a type of
DLT that simply proposes that each node will run on a chain of its own.
Therefore nodes or miners have the freedom to operate autonomously. It
basically moves to the agent-centric structure. Here agent means computer,
node, miner,etc.
5. Tempo or Radix: Tempo uses the method of making a partition of the
ledger this is termed sharding and then all the events that happened in the
network are ordered properly. Basically, transactions are added to the ledger
on basis of the order of events than the timestamp.
1. Banking: In the banking sector right now transfer of money can be both
expensive and time-consuming. Also sending money overseas becomes
even more complex due to exchange rates and other hidden fees included.
Here DLT can provide a decentralized secure network that will help to
reduce the time, complexity, and costs required to transfer money. This
decentralized network will eliminate the need for third parties which makes
this system more complex and time-consuming.
2. Cyber Security: Nowadays cyber security has been emerging as a big
threat to governments, enterprises, and individual people also. So it is
essential to find an effective solution to secure our data and privacy against
unauthorized access. In DLT, all information is authorized and securely
encrypted by various cryptographic algorithms. This provides a transparent
and secure environment and none of the data can be tempered by any
entity.
3. Supply chain management: Supply chain is one of the complex structures
itself. In this structure, it is hard to trace where the fault happened. So here
Distributed ledger technology comes into the picture, Using DLT, you can
easily trace the supply chain from the beginning to the end and can easily
find out where a mistake or fault has happened. All the data added to the
DLT is validated and permanent and can not be altered. This transparency of
data enables us to trace from the beginning to the end of the ledger.
4. Healthcare: Distributed Ledger eliminates central authority and ensures
rapid access to secured and untempered data. Here important medical can
be stored securely and no one can change this data, even if someone tries
to change it will be reflected everyone immediately. DLT can be used in the
insurance sector to trace false claims because of its decentralized system.
5. Governance: DLT can be used in the government system to make it
transparent among citizens. Many governments have adopted blockchain in
the governance system because of the robustness of this system. It can be
used as a voting system too. The traditional voting system has many flaws
and sometimes it is found that there are many false voting and illegal
activities that happen during voting. Online voting systems can be used to
vote and with security and fake votes can be easily checked. everyone will
have their own identity. So that any person sitting anywhere in the world can
cast his vote.
1. Security: All records of every transaction are securely encrypted. Once the
transaction is validated, it is completely secure and no one can update or
change it. It is a permanent process.
2. Decentralization: All network members or nodes have a copy of the ledger
for complete transparency. A decentralized private distributed network
improves the reliability of the system and gives assurance of continuous
operations without any interruption. It gives control of information and data in
the hand of the user.
3. Anonymity: The identity of each participant is anonymous and does not
possibly reveal their identity.
4. Immutable: Any validated transactions can not be changed as they are
irreversible.
5. Transparency: Distributed technologies offer a high level of transparency.
Which is necessary for the sectors like finance, medical science, banking,
etc.
6. Speed: Distributed Ledger Technology can handle large transactions faster
than traditional methods.
7. Smart Contracts: Distributed Ledger Technology supports smart contracts
which are self-executing contracts with the terms of the agreement between
buyer and seller being directly written into lines of code. Smart contracts
reduce the need for intermediaries and offer transparency and automation in
the execution of the contract terms.
8. Lower Costs: Distributed Ledger Technology eliminates intermediaries and
reduces the costs associated with intermediaries, which makes the system
more cost-effective.
9. Improved Efficiency: Distributed Ledger Technology reduces the time and
costs associated with traditional transaction methods. It offers faster
settlement times, reduced paperwork, and increased efficiency.
10. Auditing: Distributed Ledger Technology makes auditing easier as every
transaction is recorded and the ledger cannot be altered. This improves the
transparency and accuracy of financial audits.
11. Resilience: Distributed Ledger Technology is more resilient than
traditional databases as it is spread across multiple nodes. This means that
even if one node goes down, the network can still function as the rest of the
nodes can continue to validate transactions.
12. Traceability: Distributed Ledger Technology offers complete traceability
of assets, from their creation to their current ownership. This improves
accountability and reduces the risks of fraud and theft.
1. 51% Attack: The 51% attack is a bit concerning part of this distributed
ledger technology that is to be checked routinely.
2. Costs of Transaction: The connected nodes are expected to validate the
transaction of a given Distributed Ledger Technology which gives high
transaction cost as the other nodes are paid incentives to validate the
transaction.
3. Slow Transaction Speed: The major disadvantage of this DLT is the slow
speed of transactions as multiple nodes are attached to this network and it
takes time to validate the transaction by all the other nodes.
4. Scalability Issues: Due to low speed and high transaction costs DLT faces
very difficulties to expand on a large scale.
5. Lack of Regulation: As DLT is a decentralized technology, it operates
outside the control of any centralized authority which can lead to a lack of
regulation, making it difficult to hold accountable any wrongdoings or
fraudulent activities on the network.
6. Energy Consumption: Distributed Ledger Technology requires a significant
amount of energy to maintain the network and validate transactions,
especially in the case of Proof of Work consensus mechanisms, which can
lead to a negative impact on the environment.
7. Complexity: Implementing and managing Distributed Ledger Technology
can be complex and requires a high level of technical expertise, which can
be a barrier to entry for many organizations and individuals.
8. Privacy Concerns: While the anonymity of participants on the network is
considered an advantage, it can also be a disadvantage as it can lead to
privacy concerns and illicit activities on the network.
9. Lack of Interoperability: Different Distributed Ledger Technologies may
use different protocols, which can lead to interoperability issues, making it
difficult for different networks to communicate and transact with each other.
1. Experts in this area promote DLT as a solution for many problems that are
present on the internet and will drastically be able to solve all these
problems. Distributed Ledger Technology is termed the “Internet of Value”.
Transactions and processes will occur in real-time with the help of the
internet.
2. Distributed Ledger Technology has the potential to impact problems in
financial or banking, cyber security, healthcare, government, data security,
etc. sectors with effective solutions.
3. Enterprises and visionaries are now faced with the challenge of establishing
networks of entities that together can take advantage of DLT to radically
change how they share and keep records, and innovate where DLT can
enable entirely new processes and business models.
Digital Signatures
What is a Digital Signature in Blockchain?
• You can buy Ether with fiat currency from a cryptocurrency exchange
like Coinbase or Kraken.
• Ether is associated with your Ethereum account. To access your
account and Ether, you must have your account address and the
passphrase or the private key.
Gas in Ethereum
Ethereum Features
• Suppose you want to buy ETH for your crypto wallet. Here’s the step-by-step
process that illustrates how Ethereum gas fees work:
[Link] initiate a transaction. Using the platform or crypto exchange of your
choice, you can initiate a transaction—to purchase ETH, in this example. You
would input your desired purchase amount and other relevant information.
[Link] approve an estimated gas fee. The platform provides you with an
estimate for the Ethereum gas fee. Many platforms and exchanges automatically
evaluate current Ethereum gas fees and current network demand to suggest a gas
fee that balances cost with transaction speed. If the estimated gas fee is
acceptable, then you can submit the transaction for processing.
[Link] transaction is sent to the Ethereum blockchain. Your ETH purchase
order is sent to the Ethereum network. The data included with the purchase order
places an upper limit on the total gas fee that you’re willing to pay.
4.A proof-of-stake validator creates a new block. Ethereum network
How do Ethereum gas fees work?
• The concept of gas was introduced to compensate miners for their work
done on maintaining and securing the blockchain. Ater the proof of stake
algorithm was rolled out in September 2022, gas fees became the reward
for staking ETH and participating in validation—the more a user has staked,
the more they can earn.
• "Gas limit" is the maximum amount of work you're estimating a validator
will do on a particular transaction. A higher gas limit usually means the
user believes the transaction will require more work. "Gas price" is the
price per unit of work done. So, a transaction cost is the gas limit multiplied
by the gas price. Many transactions also include tips, which are added to
the gas price (the more you pay, the faster your transaction is completed).
The lower a user estimates their gas limit, the lower the priority in the
queue they will be.
Gas Fee
• What Is a Gas Fee on NFTs?
• A gas fee is a blockchain transaction fee, paid to network validators for their
services to the blockchain. Without the fees, there would be no incentive for
anyone to stake their ETH and help secure the network.
• How Is the Gas Fee Calculated?
• The gas fee is calculated using Gas Limit * Gas Price per Unit.
• So if the gas limit was 20,000 and the price per unit was 200 gwei, the
calculation would be 20,000 * 200 = 4,000,000 gwei or 0.004 ETH.
Federated Byzantine
Algorithm
• The Federated Byzantine Agreement (FBA) is a consensus
mechanism designed to achieve Byzantine Fault Tolerance (BFT) more
decentralised and flexibly than traditional BFT algorithms. FBA is well-
suited for decentralised networks and environments with diverse and
changing participants. It allows nodes to select their trusted peers,
ensuring that consensus can be reached even in the presence of
malicious or faulty nodes.
Quorum Slices and Quorums
• FBA ensures both safety and liveness within the network. Safety
means that the system never reaches an incorrect or conflicting
decision. Liveness ensures that the system will eventually reach a
decision. FBA achieves these properties by relying on the quorum
structure and iterative voting process, which ensures that the nodes
reach an agreement even when some nodes are Byzantine or faulty.
Cascading Failures and Resilience
1
PART 1: Implementation of Public Blockchain
2
Implementation of Public Blockchain
Step 1: Install Tools
• Ganache – Local Ethereum blockchain
• MetaMask – Wallet browser extension
• Remix IDE – Web-based IDE for Solidity
• Step 2: Write Smart Contract
• Step 3: Compile and Deploy (using Remix)
• Use Remix IDE
• Inject Web3 provider (MetaMask)
• Deploy contract to testnet (e.g., Rinkeby or Ganache)
• Step 4: Interact with Contract
• Call the function in smart contract
• View the updated state
3
PART 2: Implementation of Private Blockchain
4
Steps to Implement a Private Blockchain
5
2. Choose the Blockchain Platform
Popular frameworks for private blockchains:
• Hyperledger Fabric – modular, enterprise-grade, widely used in
supply chain and healthcare.
• Quorum – Ethereum-based, suited for finance.
• Corda – focused on financial institutions.
6
3. Set Up the Infrastructure
• Decide on-premises vs cloud deployment.
• Set up servers/nodes that will participate in the network.
• Install required dependencies (e.g., Docker, Kubernetes, Go/Java for
Hyperledger Fabric).
7
4. Configure the Blockchain Network
• Define network policies:
• Who can read/write transactions?
• Who validates transactions?
• Configure consensus mechanism:
• PBFT (Practical Byzantine Fault Tolerance), RAFT, or Proof of Authority (PoA)
— typically used in private chains.
• Assign node identities with cryptographic certificates.
8
5. Develop Smart Contracts
• Write business logic as smart contracts (Ethereum/Quorum: Solidity;
Hyperledger Fabric: Go/JavaScript/Java).
• Test contracts locally before deploying.
9
6. Deploy and Connect Nodes
7. Build Client Applications
• Use SDKs (Fabric SDK for [Link]/Java, [Link] for Ethereum/Quorum).
• Connect your apps to the blockchain for submitting queries, transactions,
and retrieving ledger data.
8. Security and Governance
• Implement access control (identity management with certificates).
• Define governance model: how new members join, how disputes are
resolved.
• Enable audit logging and monitoring of nodes.
10
Implementations of DLT-
Hashgraph, Holochain, DAG
Module 2
1
1. Blockchain-based Implementations
• Public Blockchains
• Anyone can join and participate.
• Examples:
• Bitcoin (PoW consensus)
• Ethereum (PoS after “Merge”)
• Solana, Cardano
• Use case: Cryptocurrencies, DeFi, NFTs.
• Private/Permissioned Blockchains
• Access restricted to approved participants.
• Examples:
• Hyperledger Fabric (IBM, Linux Foundation)
• R3 Corda (financial institutions)
• Quorum (JP Morgan, enterprise Ethereum variant)
• Use case: Supply chain, banking, healthcare.
• Consortium/Hybrid Blockchains
• Controlled by a group (not public, not fully private).
• Examples:
• Energy Web Chain (energy sector)
• B3i (insurance consortium blockchain)
• Use case: Interbank settlement, trade finance.
2
2. Directed Acyclic Graph (DAG)-based Implementations
• Instead of blocks, transactions are structured as a DAG.
• High scalability, lower energy cost.
• Examples:
• IOTA (Tangle) – IoT microtransactions
• Hedera Hashgraph – enterprise DLT with gossip protocol
• Nano – lightweight, fee-less transactions
• Use case: IoT, real-time payments, supply chain.
3
3. Hashgraph Implementations
Hashgraph: A fast, fair, energy-efficient DLT using gossip and virtual
voting. Ideal for global consensus with low latency.
• Uses “gossip about gossip” and virtual voting.
• Fast, fair, energy-efficient compared to blockchain.
• Example: Hedera Hashgraph
• Use case: Enterprise-grade finance, healthcare, gaming.
4
4. Holochain
Holochain: A radical departure — no global ledger. Each user maintains
their own data. Great for distributed apps with local interactions.
It’s a DAG-based aBFT consensus system that ensures every node
reaches the same final order of transactions without forks.
• Agent-centric DLT (unlike blockchain’s data-centric approach).
• Each user runs their own chain validated by peers.
• Use case: Decentralized apps (dApps), distributed social media.
5
Hashgraph
6
Hashgraph
• Nodes gossip (share data) with random peers.
• Each message contains a history of who gossiped to whom (this is the
gossip-about-gossip).
• The system can calculate consensus timestamps and event order
virtually (no need for active voting).
• Final consensus is reached efficiently through virtual voting logic.
7
Hashgraph
Feature Description
Data Structure Directed Acyclic Graph (DAG)
Consensus Mechanism Gossip about Gossip + Virtual Voting
8
How Hashgraph Works –In detail
• 1. Data Structure
• Unlike blockchain’s linear chain of blocks, Hashgraph is a Directed
Acyclic Graph (DAG) of events.
• Each “event” = a small packet of information that contains:
• Transactions
• Timestamps
• Hashes of two earlier events (from other nodes)
• This creates a graph structure where every new event is connected to
two earlier events → ensuring immutability and transparency.
9
2. Gossip Protocol ("Gossip about Gossip")
• Gossip: Each node randomly selects another node and shares all the
events it knows about.
• Over time, this spreads information very fast (like rumors).
• Gossip about gossip: In addition to transactions, nodes also share
metadata about who they heard it from and when.
• This allows nodes to reconstruct the full history of communication.
• So every node ends up with the same view of the transaction order.
10
3. Virtual Voting
• Traditional voting requires lots of messages between nodes
(expensive).
• Hashgraph avoids this with virtual voting:
• Since all nodes eventually know the entire gossip history, each node can
independently calculate how every other node would have voted.
• This eliminates the need for explicit voting messages.
• Saves bandwidth and boosts speed.
11
4. Consensus & Finality
• Consensus is achieved by using the gossip metadata and virtual
voting:
• Each event gets a timestamp when most nodes first became aware of it.
• Events are placed in order based on these consensus timestamps.
• Once consensus is reached, it’s final (no forks like in blockchain).
• Consensus algorithm: Asynchronous Byzantine Fault Tolerance
(aBFT)
• Tolerates up to 1/3 malicious nodes
• No leader election (avoids bottlenecks and attacks)
12
5. Key Properties
• Speed: Hundreds of thousands of TPS (theoretically) since no mining
and no block creation.
• Fairness: Consensus timestamp is based on when the majority
received the event, not on a miner’s discretion.
• Security: aBFT ensures robustness against malicious actors.
• Energy efficiency: No Proof-of-Work mining → low energy use.
13
Example of Transaction Flow in Hashgraph
• Alice sends 10 tokens to Bob.
• Her node creates an event with this transaction + links to two previous
events.
• Her node gossips this event to a random neighbor node.
• That neighbor continues gossiping to others.
• Within a few gossip rounds, every node in the network knows about Alice’s
transaction.
• Each node uses virtual voting to decide the consensus order.
• Once ordered and timestamped, the transaction is finalized → no forks, no
waiting for multiple confirmations.
14
Holochain
15
Holochain
• Holochain is not a blockchain — it’s a distributed framework for
building peer-to-peer applications without a global ledger.
• While blockchain is data-centric (one global ledger shared by all),
Holochain is agent-centric (each participant maintains their own
chain and validates against shared rules).
Feature Description
Data Structure Agent-centric DHT (Distributed Hash Table)
Consensus Mechanism Validation Rules + Gossip + DHT
Founder Arthur Brock, Eric Harris-Braun
No Global Ledger Each user (agent) maintains their own chain
Scalable & Low Energy No mining, no consensus bottlenecks
16
Holochain
• Each user runs their own source chain, signing their actions.
• Transactions are validated and shared to a DHT (like BitTorrent).
• Validators in the network check if actions conform to the app’s rules.
• There’s no need for global consensus — each agent operates
autonomously but shares validated data.
17
Holochain –In detail
1. Core Idea
• In blockchain, there’s one global ledger of truth.
• In Holochain, every participant (agent) has their own source chain
that records their actions.
• These chains are validated against a set of shared DNA (rules), and
relevant data is stored/distributed in a DHT (Distributed Hash Table).
• So instead of global consensus, Holochain relies on local validation +
shared data integrity.
18
2. Components of Holochain
• Source Chain (per agent)
• A private append-only hash chain that records the agent’s actions.
• Each entry is cryptographically signed.
• Example: Alice’s chain records “Alice sends 5 tokens to Bob”.
• DNA (Application Rules)
• Defines the rules of the app (like smart contracts in blockchain).
• Every node must follow these rules when validating.
• Example: In a currency app, DNA may say “no double spending allowed”.
• DHT (Distributed Hash Table)
• A decentralized database where validated data is stored and shared.
• Each agent stores pieces of the data (sharding).
• Ensures redundancy and availability.
• Validation
• When an agent commits an action, peers validate it against DNA rules.
• If valid → published to DHT.
• If invalid → rejected and flagged (agent may be blacklisted).
19
3. How Transactions Work
• Let’s say Alice sends tokens to Bob:
• Alice records the action in her source chain → entry includes hash of
the previous entry (immutability).
• Alice publishes the transaction to the DHT.
• Peers validate the transaction:
• Is Alice authorized?
• Does she have enough balance?
• Is there a double-spend attempt?
• If valid → peers store it in the DHT (so everyone can later confirm).
• Bob sees the confirmed transaction in the shared DHT.
• No mining, no global ledger, no consensus overhead.
20
4. Consensus Model
• Unlike blockchain, there is no global consensus.
• Each agent is the authority of their own chain.
• Shared consistency comes from:
• Validation rules (DNA)
• DHT gossip (peers share and cross-check data)
• Malicious or invalid actions are rejected locally (by validators).
• This is called “Agent-Centric Validation” instead of “Ledger
Consensus”.
21
5. Key Features
• Scalability: Since no global ledger exists, adding users doesn’t
bottleneck the system. Each agent only validates what’s relevant.
• Energy Efficiency: No Proof-of-Work → lightweight.
• Resilience: Data is sharded and replicated → no single point of failure.
• Privacy: Each agent controls their own chain. Only necessary info
goes to DHT.
• Flexibility: Different apps can have different DNAs (rules).
22
Example Use Case
• Imagine a decentralized social network (like Twitter on Holochain):
• Each user has their own source chain recording posts.
• Posts are published to DHT so others can read them.
• Peers validate posts against DNA (e.g., no spam, authenticity rules).
• If a user tries to post invalid data, it’s rejected and flagged.
• Result: A distributed social app with no central server and no
blockchain bottleneck.
23
• Holochain works by giving each participant their own chain of truth
and using a DHT for distributed storage + validation rules (DNA) for
consistency. Instead of consensus across the whole network, it uses
local validation and peer gossip, which makes it lightweight,
scalable, and agent-centric.
24
Comparison Blockchain with Holochain
25
Comparison Blockchain, Hashgraph and
Holochain
Feature Blockchain Hashgraph Holochain
Agent-centric source
Structure Linear chain Directed Acyclic Graph
chains
App-defined validation
Consensus PoW / PoS Gossip + Virtual Voting
rules
Energy Usage High (PoW) Low Very low
Scalability Limited High Very high
Fast DApps, token Peer-to-peer apps, social
Use Case Fit Cryptocurrencies
networks DApps
26
DAG
27
DAG
• DAG (Directed Acyclic Graph) is another important DLT (Distributed
Ledger Technology) structure, and it works very differently from
blockchain or Holochain.
• DAG works by having each new transaction approve earlier ones,
creating a graph of confirmations instead of a chain. Consensus is
achieved by the weight of accumulated approvals. This makes it fast,
scalable, and fee-less, but security and tip-selection mechanisms are
still areas of research.
28
What is DAG in DLT?
29
2. Core Mechanism
• Each new transaction must approve (reference) one or more earlier
transactions.
• Usually 2 parent transactions are chosen randomly (weighted by their
importance).
• Example: If Alice sends coins, her transaction approves Bob’s and Charlie’s
earlier transactions.
• By approving, Alice indirectly confirms not only Bob’s and Charlie’s
transactions, but also the entire history behind them.
• Over time, this creates a graph of approvals, where newer
transactions build on older ones.
30
3. Consensus in DAG
• No mining (unlike blockchain).
• Consensus emerges naturally from accumulated approvals:
• The more future transactions reference your transaction, the more “confirmed” it
becomes.
• Each node runs a lightweight algorithm to select which transactions to
approve (avoiding conflicts like double spending).
• Example:
• Alice’s transaction is referenced by 100 other transactions.
• Bob’s transaction is only referenced by 2.
• The network considers Alice’s as “more confirmed” than Bob’s.
31
4. Validation
• When a new transaction is created, the issuing node:
• Checks validity (signature, no double spend).
• Chooses two previous transactions to approve (using algorithms like random
walk or tip selection).
• Broadcasts it to the network.
• Other nodes validate and store it in their local DAG copy.
32
5. Finality
• In DAG, finality is probabilistic:
• The more approvals a transaction accumulates, the more secure it becomes.
• At some threshold (e.g., 95% of tips indirectly reference it), the network treats
it as final.
33
Example
Imagine 5 people sending transactions:
• Alice sends Tx1.
• Bob sends Tx2 → approves Tx1.
• Carol sends Tx3 → approves Tx1 & Tx2.
• Dave sends Tx4 → approves Tx2 & Tx3.
• Eve sends Tx5 → approves Tx3 & Tx4.
• This forms a web of confirmations, not a chain.
34
Key Properties
35
Challenges
• Tip selection: Choosing which transactions to approve is tricky (must
avoid lazy tips that never confirm).
• Security: Small networks are vulnerable to attacks (e.g., parasite chain
or double spending).
• Coordination: Some DAGs (like IOTA’s Tangle) use a temporary
centralized coordinator for protection until network grows.
36
Examples of DAG-based DLTs
• IOTA (Tangle) → IoT micropayments.
• Nano (Block-lattice DAG) → instant fee-less payments.
• Hedera Hashgraph → gossip + virtual voting on DAG.
• Obyte → DAG-based cryptocurrency.
37
Keyless Signature
Infrastructure (KSI)
Motivation behind KSI
• The blockchain mechanism works well in a permission less environment, i.e., an open-for-all environment.
What if someone wants to deploy blockchain in a restricted or permission environment like an industry? In
that case, the following issues may arise:
1. The system will not be decentralized. It will be under a central authority that will defeat the purpose of a
ledger-based trust. The administration can, at some point, collude and change the ledger.
2. Due to memory constraints in a restricted environment or due to implicit trust, not all users of the network
will store a copy of the blockchain.
3. The frequency of transactions is lower than that in an open-for-all or permission less environment. So, there
will always be a danger of manipulation of the blockchain. Users can collude and share their private keys and
manipulate some transactions on the previous blocks in the blockchain. Since the frequency of mined blocks
is low, they will have enough time to manipulate to mine the following blocks in the chain, validating their
change in the previous block.
• From the issues mentioned above, we can conclude that the integrity of the blockchain in a permission
environment relies solely upon the assumption that the users’ private keys are not compromised for a long
time.
• Hence, we need an infrastructure that does not rely upon the asymmetric key encryption scheme.
• Asymmetric keys are the foundation of Public Key Infrastructure (PKI) a cryptographic scheme requiring two different keys,
one to lock or encrypt the plaintext, and one to unlock or decrypt the cyphertext. Neither key will do both functions. One key
is published (public key) and the other is kept private (private key).
This is what motivated the development of Keyless Signature Infrastructure (KSI).
KSI
• The usage of blockchain in a restricted environment motivated the
development of Keyless Signature Infrastructure (KSI). KSI resolves
some common issues faced while using the traditional blockchain in a
permissioned environment and does not require using a Public Key
Infrastructure (PKI). It is an intelligent application of cryptographic
hash functions to maintain the users’ anonymity.
• KSI Blockchain was designed and deployed on a large scale by Estonia,
a country in Europe.
• KSI BCT is used on top of existing security products. Provides
undeniable proof of integrity in near real-time.
• Increasing the security of the system is done by eliminating the need
for a single point of trust (certificate authority).
• KSI only stores hash values (“cryptographic fingerprint”) providing
scalability.
• No customer data is stored, making it impossible to recreate the data
from the hash.
• KSI timestamping is designed for data integrity but does not
require keys - the timestamps are verifiable without reliance on
trusted authorities.
• KSI is a public ledger that provides proof-of-time, integrity and
identity of electronic data.
• Used by governments since 2007.
• Benefits:
• Performance
• Scalable
• Secure
• Distributed
• Low maintenance
Understanding Merkle trees
• we need to know how Merkle Trees work because they are
extensively used in KSI.
• A Merkle tree, also known as a binary hash tree, is a data structure
used to summarize and verify the integrity of large data sets
efficiently. Merkle trees are binary trees containing cryptographic
hashes.
• these trees are usually displayed upside down with the “root” at the
top and the “leaves” at the bottom of a diagram.
Merkle trees
• Merkle trees summarize all the transactions in a block, producing an
overall digital fingerprint of the entire set of transactions, and
providing a very efficient process to verify whether a transaction is
included in a block.
• A Merkle tree is constructed by recursively hashing pairs of nodes
until only one hash, called the root, or Merkle root.
• Figure. 1 shows how the root of a Merkle tree is generated from the
individual hashes.
Merkle trees
• When N data elements are hashed and summarized in a Merkle tree,
you can check to see if any one data element is included in the tree
with at most 2log₂(N) calculations, making this a very efficient data
structure. Figure. 2 shows how the existence of hash can be verified
in log₂(N) steps.
• The blockchain users in the permission less environment used the
concept of “proof-of-work” to validate a block in the chain and ensure
that they had the correct copy of the blockchain.
• Contrary to this, KSI uses “proof-of-time” to serve the same purpose
and resolve all the previously-mentioned issues.
KSI Components -Application
• This is a platform where users can process their transactions.
• These individual transaction requests are hashed using a
cryptographic hash function (SHA256) and sent to the gateway.
• The application performs the hashing step that forms the signing
request.
• The signing request is sent to the gateway that provides services to
the end user.
KSI Components -Gateway
• This component collects all the transaction requests it receives every
second and sends them to the aggregator network in batches.
• An extender in the gateway offers signature token verification
services to the users.
• A signature token is essentially a path to the Merkle root, it is the
proof that the data existed at a specific time and the request was
received through a particular access point.
KSI Components –Aggregation Network
• The aggregators working in rounds of equal duration gather the
incoming requests to build a hash tree and pass the top hash values
to their upstream aggregators.
• The requests received during a particular round are aggregated into
the same hash tree.
• An aggregator sends responses to all its child aggregators along with
the hash path of its tree after receiving a response from its upstream
aggregator.
KSI Components –Core Cluster
• The top hash values are linked together in a globally unique hash tree
called the hash calendar by the core cluster. The core cluster is
responsible for publishing the root hash into a hash calendar after
every second. The time value is encoded in the hash calendar’s shape.
Overall Working of KSI
• KSI works in three stages, namely, hashing, aggregation, and
publication.
• The user sends the hash of a statement through the KSI gateway to
obtain a signature in response to the hash. A global per-round hash is
created using the aggregators to represent all the transactions signed
during a round. The global per-round hashes’ top values are linked
into a perpetual hash tree and published in hard-to-modify and
widely witnessed media such as newspapers.
How KSI solves the issues
[Link] issue of decentralization is resolved by making the hash calendar publicly
available. Any change in the hash calendar will change the shape of the hash
calendar, which in turn will change the time value associated with it. The users of
the network can easily detect this change.
[Link] restrictions are no longer a problem because the infrastructure gateway
sends a signature token that the user can use to validate their transactions at any
point. So, the users are not required to store the complete copy of the hash
calendar.
[Link] are no asymmetric key encryption schemes since all the transactions are
processed and passed through the infrastructure as unreadable hashes. So, the
system’s integrity is no longer dependent upon the secrecy of the users’ private
keys.
[Link] frequency of transactions is resolved since the core cluster publishes a new
root hash every second, making executing a blockchain manipulation attack
computationally infeasible. So, the danger of changing the transactions in a node
of the hash calendar is rectified.
BCSE324L - FOUNDATIONS OF BLOCKCHAIN TECHNOLOGY
Module 2: DISTRIBUTED LEDGER TECHNOLOGY
• It is a digital system that lets users and systems record transactions related to assets. A
distributed ledger technology stores the information at multiple locations at any given point
of time.
• DLT, unlike traditional databases, does not have any central place to store information.
• The decentralization feature also provides better security, transparency, and trust among
parties using it.
Origin of Ledger
• DLT originates from the peer-to-peer(P2P) network. In any P2P network, peers
communicate with each other without the need for a centralized entity. Technically, a
distributed ledger technology is possible through a peer-to-peer network.
Centralized Ledger
Types of Distributed Ledger Technology
• Distributed Ledger (Permissionless): Each node in a P2P network owns a full and up-to-
date copy of the entire ledger. Every proposed local addition to the ledger by a network
participant is communicated across the network to all nodes. Nodes collectively validate the
change through an algorithmic consensus mechanism. After validation is accepted, the new
addition is added to all respective ledgers to ensure data consistency across the entire
network.
• Recordkeeping has always been a centralized process that requires trust in the record
keeper. The most important innovation of DLT is that control over the ledger does not lie
with any one entity but is with several or all network participants – depending on the type
of Distributed Ledger.
• The removal of the central party can increase speed and potentially remove costs and
inefficiencies associated with maintaining the ledger and subsequent reconciliations.
Features of Distributed Ledger Technology
Consensus Mechanism:
• The distributed nature of the DL requires the participants in the network (‘nodes’) to reach
a consensus regarding the validity of new data entries by following a set of rules.
• Each new data entry, i.e. a transaction record, is “hashed”, which means that a cryptographic
hash function is applied to the original message.
• The blocks are signed with a digital signature, which binds the sender to the contents of the
block, akin to a signature on a contract. DLT uses ‘public key cryptography’ for digital
signatures
Features of Distributed Ledger Technology
Cryptographic Hash Functions and Digital Signatures:
Ecosystem of Distributed Ledger Technology
An ecosystem is a collection of stakeholders such as organizations and users in conjunction
with other entities, performing separate roles. There are four aspects of DLT ecosystems:
• Hardware aspect,
• Business aspect,
To get a better understanding of distributed ledger technologies, we also need to learn about
its ecosystem.
Ecosystem of Distributed Ledger Technology
Hardware aspect of the DLT ecosystem:
The hardware aspect of DLT ecosystems is comprised of a large number of nodes where each
node could either be a computer, server, or storage device. Three modalities of nodes can
exist:
• block producing full validating nodes: participates in a consensus process and contains
an entire replica of the distributed ledger
• non‐block producing full validating nodes: does not participate in a consensus process
and contains an entire replica of the distributed ledger
• partial/light nodes: only a partial transaction list but must be connected in some way to a
full node
Ecosystem of Distributed Ledger Technology
Business aspect of the DLT ecosystem:
The business aspect of the DLT ecosystem consists of users, investors, block producers,
corporations, and developers.
• DLT users: engage with a DLT by using a DLT application, product or service.
• Investors: the people or organizations that provide capital to create the DLT ecosystem.
• Block producers: full validating nodes that actively participate in a given DLT network's
consensus mechanism.
• Corporations: utilize DLT for business activities and deliver technologies to a large group
of customers or end-users.
Ecosystem of Distributed Ledger Technology
Software aspect of the DLT ecosystem:
• DLT applications can be written in a variety of languages including C++, Java, Go, Rust,
Solidity, JavaScript, Python, and many others.
• DLTs are not language-specific and can work with any programming language or tools based
on the requirement. The choice of the programming language depends on the language’s
weakness and strength.
• These applications generally fall into three categories: financial, semi‐financial, and non‐
financial applications.
Ecosystem of Distributed Ledger Technology
Protocol aspect of the DLT ecosystem:
• Developers are involved with setting up DLT protocols that serve networks. The protocol
layer is concerned mostly with how cryptographic keys interact with the network.
• Researchers and academia aid in educating others on the implications of DLT systems and
defining its limitations.
Ecosystem of Distributed Ledger Technology
Implementation of Distributed Ledger Technology
Distributed ledger technology has seen multiple implementations over the years. However,
there are a few implementations that have more impact than others.
Blockchain:
• Another feature that makes blockchain so amazing is transparency. The transactions that
are done through the blockchain can be traced and validated if needed.
Implementation of Distributed Ledger Technology
Distributed ledger technology has seen multiple implementations over the years. However,
there are a few implementations that have more impact than others.
Ethereum:
• One of the limitation of bitcoin is the use of the Proof of Work consensus algorithm as it
required a lot of energy to compute and validate transactions.
• It also introduced smart contracts, a way to automate tasks within the network. This also
gave rise to decentralized apps which can automate a large aspect of the requirement.
Implementation of Distributed Ledger Technology
Distributed ledger technology has seen multiple implementations over the years. However,
there are a few implementations that have more impact than others.
Corda:
• Corda is an open source blockchain project, designed for business from the start. Only
Corda allows you to build interoperable blockchain networks that transact in strict privacy.
Corda's smart contract technology allows businesses to transact directly, with value.
• Smart contracts that can be written in Java and other JVM languages.
Hashgraph:
• Hashgraphs don’t bundle data into blocks as blockchains do. Instead, hashgraph nodes use a
“gossip about gossip” system, wherein they organically transmit messages.
• Gossip protocol-In hashgraph, when sending information between nodes, "Alice" will choose
another member at random, such as "Bob". Then Alice will tell Bob all of the information
she knows so far. Alice then repeats this information with a different random member.
• The synchronization of information between two members through the gossip protocol is
called a gossip sync.
Implementation of Distributed Ledger Technology
Hashgraph: Cont…
Upon completion of a gossip sync, each participating member commemorates the gossip sync
with an event.
• Vertex (node), represents an activity that needs to be added to the decentralized network.
An edge, shows that a DAG moves only in a forward direction. There is no path back to a
previous vertex.
• Each new transaction must reference a previous one before getting into the network. Each
vertex represents a transaction. Each transaction is built on top of the other.
• Unlike a blockchain, transaction data is not collected and added to a block. Nodes must link
each transaction to previous transactions to ensure double-spend protection.
Public vs Private Ledgers
Public Ledger:
• Open Access: Anyone can join and participate in the network, making it highly transparent
and decentralized. Think of it as a giant, publicly readable spreadsheet.
• Enhanced Control and Scalability: Permissions can be set for different users, and the
network can be fine-tuned for specific needs. This flexibility allows for faster transaction
processing and tailored applications.
Scalability Can be slower due to large network Potentially faster and more scalable
Registries: Specific subsets of data within a ledger, focusing on a particular type of asset or
information.
Both ledgers and registries play crucial roles in building trust, transparency, and efficiency in
various applications of blockchain technology.
Keyless Signature Infrastructure
Merkle tree, also known as a binary hash tree, is a data structure used to summarize and
verify the integrity of large data sets efficiently. Merkle trees are binary trees containing
cryptographic hashes.
Merkle trees summarize all the transactions in a block, producing an overall digital
fingerprint of the entire set of transactions, and providing a very efficient process to verify
whether a transaction is included in a block.
A Merkle tree is constructed by recursively hashing pairs of nodes until only one hash, called
the root, or Merkle root.
Keyless Signature Infrastructure
Keyless Signature Infrastructure
• Keyless Signature Infrastructure (KSI) is a blockchain technology that provides massive
scale data authentication without the reliance on centralized authorities. It solely relies on
the security of hash functions and the blockchain.
• With the help of KSI or Keyless Signature Infrastructure we eliminate the need of symmetric
or asymmetric keys for the purpose of verification.
• KSI only makes use of hashes, so to verify whether the given data is the original data, all
we'd need to do is hash the original file and compare it with that of the given data's and if
they match, then the data isn't compromised
Keyless Signature Infrastructure
Keyless Signature Infrastructure
Keyless Signature Infrastructure (KSI) has four major components:
• Application
• Gateway
• Aggregator Network
• Core Cluster
Keyless Signature Infrastructure
Keyless Signature Infrastructure (KSI) has four major components:
• Application: The individual transaction requests are hashed using a cryptographic hash
function (SHA256) and sent to the gateway.
• Gateway: An extender in the gateway offers signature token verification services to the
users. A signature token is essentially a path to the Merkle root.
• Aggregator Network: The aggregators working in rounds of equal duration gather the
incoming requests to build a hash tree and pass the top hash values to their upstream
aggregators.
• Core Cluster: The top hash values are linked together in a globally unique hash tree called
the hash calendar
Keyless Signature Infrastructure
Keyless Signature Infrastructure (KSI) has four major components:
Practitioner Perspective - DLT
Transparency as a Strategic Risk:
• In many situations, transparency is a double-edged sword, and some of the parties that may
benefit the most from it and also suffered a lot from it.
• A host of research shows that institutional investors, in particular, are very concerned that
competitors might imitate their trading strategies.
• In addition to situations when some parties desire privacy, there are situations where
privacy is a necessity. A good example is blockchain based voting. The underlying idea of
using a blockchain for voting is to issue digital, single-use tokens to eligible voters.
• Existing blockchain technology can address many of the issues of transparency highlighted
here.
Practitioner Perspective - DLT
Transparency as a Strategic Risk:
• A common approach of firms to increase trust is to publish the adopted ethical codes of
conduct, which makes it easier for employees to know what is expected and create
credibility in business dealings.
• A common approach of firms to increase trust is to publish the adopted ethical codes of
conduct, which makes it easier for employees to know what is expected and create
credibility in business dealings.
As Tapscott outlines, there are five elements for firm success with increased transparency and
public scrutiny. Firms need to:
• Create true value that withstands the scrutiny that transparency brings about.
• Behave with integrity since lapses are caught quickly in a transparent world.
• In the digital era, it is often impossible to credibly and efficiently reveal all of a
government’s relevant transactions and business dealings—but when all transactions and
contracts are recorded on a blockchain, nothing remains hidden
Practitioner Perspective - DLT
Transparency as a Strategic Assert – Disintermediation and improved governance
• When all these data are recorded on a public blockchain, performing such manipulations
becomes prohibitively difficult and expensive.
Technological approaches to privacy in blockchains
• Hierarchical deterministic (HD) wallets algorithmically generate a new public key for every
piece of a larger trade.
• Generally, users must make a backup of each key whenever a new one is generated. That
said, if the wallet’s details are lost, all of the addresses and keys would also be lost.
• Hierarchical deterministic wallets took the place of JBOK wallets since users could back up
HD wallets using a single seed and greatly benefit from extended keys. Therefore, a wallet
that generates its public and private keys from a seed is referred to as a hierarchical
deterministic wallet.
Technological approaches to privacy in blockchains
Public & Private Blockchains
• Public and private blockchains differ in terms of accessibility, transparency, and
control. Public blockchains are open to anyone and operate on the principle of
transparency, allowing anyone to join the network, validate transactions, and contribute to
the consensus process. In contrast, private blockchains are restricted to authorized
participants, offering enhanced privacy and control.
Public & Private Blockchains
Zero Knowledge Proofs
Zero-knowledge proofs can be understood as a construct or a protocol through which a
‘prover’ can present proof to a ‘verifier’ that the prover knows a ‘secret’, without revealing any
information about the secrete.
The verifier, upon examining the presented proof, will be convinced that the prover indeed
knows the secret without learning anything else (zero-knowledge) about the secret.
Zero Knowledge Proofs
Zero-knowledge proofs must satisfy the following conditions.
• Completeness – If the prover’s claim is true, an honest verifier who is following the
protocol will be convinced that the claim is true.
• Soundness – If the prover’s claim is false, the protocol makes extremely difficult for a
prover to convince a honest verifier.
• Zero knowledge – The protocol will not leak any information about the secret. The verifier
learns nothing except that the claim is true.
Zero Knowledge Proofs
There are two categories of Zero knowledge proofs.
Interactive – Protocols are defined through which the verifier can send one or more
challenges to the prover and evaluate the responses to convince themselves that the provers
claim about the knowledge secrete is correct.
Zero Knowledge Proofs
There are two categories of Zero knowledge proofs.
Interactive – Protocols are defined through which the verifier can send one or more
challenges to the prover and evaluate the responses to convince themselves that the provers
claim about the knowledge secrete is correct.
Non interactive – There is no interaction is required between the prover and the verifier. The
prover creates a cryptographic proof of the claim that can be instantly authenticated by the
verifier.
Zero Knowledge Proofs
There are two categories of Zero knowledge proofs.
Non interactive – There is no interaction is required between the prover and the verifier. The
prover creates a cryptographic proof of the claim that can be instantly authenticated by the
verifier.
• Completeness –
If the statement is true then an honest verifier can be convinced
eventually.
• Soundness –
If the prover is dishonest, they can’t convince the verifier of the
soundness of the proof.
Types of Zero-Knowledge Proofs
• There are various implementations of ZKPs, with each having its own
trade-offs of proof size, prover time, verification time, and more. They
include:
• zk-SNARKs
• SNARKs, which stands for “succinct non-interactive argument of
knowledge”, are small in size and easy to verify. They generate a
cryptographic proof using elliptical curves, which is more gas-efficient
than the hashing function method used by STARKS.
Types of Zero-Knowledge Proofs
• zk-STARKs
• STARK stands for “scalable transparent argument of knowledge”. STARK-based
proofs require minimal interaction between the prover and the verifier, making
them much faster than SNARKs.
• PLONK
• Standing for “permutations over Lagrange-bases for oecumenical noninteractive
arguments of knowledge,” PLONKs use a universal trusted setup that can be used
with any program and can include a large number of participants.
• Bulletproofs
• Bulletproofs are short non-interactive zero-knowledge proofs that require no
trusted setup. They are designed to enable private transactions for
cryptocurrencies.
• There are already a number of zero-knowledge projec
Use cases for ZKP
• Zero-knowledge proofs unlock exciting use cases across Web3, enhancing security, protecting user privacy,
and supporting scaling with layer 2s.
• Private Transactions
• ZKPs have been used by blockchains such as Zcash to allow users to create privacy-preserving transactions that keep the
monetary amount, sender, and receiver addresses private.
• Verifiable Computations
• Decentralized oracle networks, which provide smart contracts with access to off-chain data and computation, can also
leverage ZKPs to prove some fact about an off-chain data point, without revealing the underlying data on-chain.
• Highly Scalable and Secure Layer 2s
• Verifiable computations through methods such as zk-Rollups, Validiums, and Volitions enable highly secure and scalable layer
2s. Using layer 1s such as Ethereum as a settlement layer, they can provide dApps and users with faster and more efficient
transactions.
• Decentralized Identity and Authentication
• ZKPs can underpin identity management systems that enable users to validate their identity, while protecting their personal
information. For example, a ZKP-based identity solution could enable a person to verify that they’re a citizen of a country
without having to provide their passport details.
zk-SNARKs
What is the main purpose of zk-SNARKs in
blockchain technology?
• Zk-SNARK is a robust proof system that ensures secure and
confidential transactions.
• Its primary objective is convincing the verifier that the prover
possesses specific information without revealing the data.
• This process fosters trust and authenticity between parties without
direct communication.
Zk-SNARK
• The term "zk-SNARK" is an acronym that stands for "Zero-Knowledge
Succinct Non-Interactive Argument of Knowledge." Each part of the
name refers to a characteristic of zk-SNARKs, so it helps to look at
each component separately:
• Zero-Knowledge: The prover can show the verifier that they have a
piece of information without providing the information itself.
• Succinct: The proof can be verified within a few milliseconds since
the proof length is only a few hundred bytes at most.
• Non-Interactive: The proof consists of a single message from the
prover to the verifier.
• Argument: Argument is the term used for these proofs because they
don't quite fit the traditional definition of proofs, but they effectively
serve the same purpose.
• Knowledge: Knowledge refers to the information possessed by the
prover.
zk-SNARKs
• In cryptocurrency, zk-SNARKs are a way for transactions to be
private and fully encrypted on the blockchain while still being
validated using the network's consensus rules.
• zk-SNARKs can show that the sender has the amount of funds
they want to transfer without making that information public.
zk-SNARKs
• zk-SNARKs comes from the concept of the zero-knowledge
proof, which was first introduced in a 1985 paper written by
Shafi Goldwasser, Silvio Micali, and Charles Rackoff.
• A 2012 paper by Nir Bitansky, Ran Canetti, Alessandro Chiesa,
and Eran Tromer coined the term "zk-SNARK" to describe a new
zero-knowledge protocol.
• Unlike prior methods, it wouldn't require interaction between the
prover and verifier outside of a single message.
In zk-SNARK, the equation is represented as
follows:
• f(x, w) = True/False
• Where:
• f represents the function that undergoes verification.
• x is the public input.
• w is the private key.
• The verifier’s ability to prove that the equation is a truth defines zk-
SNARK.
Alice and Bob example
• In a ZK-SNARK protocol, there are two parties:
• The prover (Alice) and,
• The verifier (Bob)