Files
zeekay abf99d05fc papers: reorganize into per-paper dirs, add Antje Worring as co-author
Restructured from flat .tex/.pdf files into per-paper subdirectories.
Added Antje Worring as co-author on all papers.
Synced PDFs to pdfs/ for download site.
2026-04-18 21:50:07 -07:00

28 lines
1.3 KiB
TeX

\section{Security Analysis}
\label{sec:security}
\subsection{Correctness}
\begin{theorem}[Sync Correctness]
If the state sync protocol completes without error, the local state trie has root hash equal to the target $R$.
\end{theorem}
\begin{proof}
Each chunk is verified via a range proof against $R$ (Algorithm~\ref{alg:verify_range}). The chunk set covers the entire key space $[0, 2^{256})$ without gaps (by construction in Algorithm~\ref{alg:plan}). Assembling all verified chunks produces a trie whose root hash is $R$ by the collision resistance of Keccak-256.
\end{proof}
\subsection{Completeness}
\begin{theorem}[No Missing State]
A malicious peer cannot cause the syncing node to accept an incomplete state (with missing accounts or storage slots).
\end{theorem}
\begin{proof}
Range proofs verify completeness within each chunk's key range. The chunk planning algorithm ensures the union of all chunk ranges equals $[0, 2^{256})$. Any missing leaf would cause a range proof verification failure, which triggers retry from a different peer.
\end{proof}
\subsection{Byzantine Peer Tolerance}
The protocol tolerates any number of Byzantine peers as long as at least one honest peer with the target state is available. Byzantine peers can delay sync (by providing invalid data that must be retried) but cannot cause acceptance of incorrect state.