FEASIBLE REGION OF RTCT VERIFICATION PARAMETERS IN DECENTRALIZED OVERLAY NETWORKS
DOI:
https://doi.org/10.28925/2663-4023.2026.35.1444Keywords:
Sybil attack, participation control, decentralized overlay network, challenge token, feasible region, false-miss rate, Erlang formula, crypto-economic attack cost, Karush–Kuhn–Tucker conditionsAbstract
This paper constructs the feasible region of verification parameters based on Random Time Challenge Tokens (RTCT) in decentralized overlay networks as the intersection of an upper bound on the false-miss rate of honest nodes and a lower bound on the cost of sustaining a set of fake identities. The false-miss law is derived from the distribution of the puzzle-solving time and therefore depends on the challenge difficulty; the minimum response window must be computed for the slowest tolerated node, otherwise the false-miss rate in a heterogeneous population is underestimated by a factor of 5.8. The capacity an adversary needs to service k identities is obtained from a loss-system staffing problem with the Erlang formula, insensitive to the distribution of the solving time; its dependence on k has two regimes. It is proved that, when the CPU duty cycle of an honest node is bounded and resource prices are linear, the adversary’s per-identity computing cost has an asymptotic ceiling independent of both the difficulty and the challenge intensity; with public energy and compute-rental prices it is about 6·10⁻⁴ EUR per identity per day, an order of magnitude below the cost of network presence. The deterrent effect of RTCT therefore rests on the enforced recurrence of entry costs rather than on computing cost: the number of identities that can be held without servicing is proportional to the ratio of the eviction time to the sum of the eviction time and the recovery time of the scarce entry resource. For a strictly increasing security index with a positive marginal effect at the load bound, the optimum is a corner solution on the honest-side constraints, and the Lagrange multiplier of the load constraint is the shadow price of security. The results were verified by Monte Carlo simulation.
Downloads
References
Douceur, J. R. (2002). The Sybil attack. In Peer-to-Peer Systems (IPTPS 2002), LNCS 2429 (pp. 251–260). Springer. https://doi.org/10.1007/3-540-45748-8_24
Sridhar, S., Ascigil, O., Keizer, N., Genon, F., Pierre, S., Psaras, Y., Rivière, E., & Król, M. (2024). Content censorship in the InterPlanetary File System. In Proceedings of the 2024 Network and Distributed System Security Symposium (NDSS 2024). Internet Society. https://doi.org/10.14722/ndss.2024.23153
Dwork, C., & Naor, M. (1993). Pricing via processing or combatting junk mail. In Advances in Cryptology – CRYPTO ’92, LNCS 740 (pp. 139–147). Springer. https://doi.org/10.1007/3-540-48071-4_10
Borisov, N. (2006). Computational puzzles as Sybil defenses. In Sixth IEEE International Conference on Peer-to-Peer Computing (P2P’06) (pp. 171–176). IEEE. https://doi.org/10.1109/P2P.2006.10
Platt, M., & McBurney, P. (2023). Sybil in the haystack: A comprehensive review of blockchain consensus mechanisms in search of strong Sybil attack resistance. Algorithms, 16(1), Article 34. https://doi.org/10.3390/a16010034
Пархоменко, І., & Огієвич, Р. (2025). Криптоекономічна стійкість децентралізованої мережі з використанням випадкових часових челендж-токенів (RTCT). Кібербезпека: освіта, наука, техніка, 4(28), 465–477. https://doi.org/10.28925/2663-4023.2025.28.817
Parkhomenko, I., Myrutenko, L., Ohiievych, R., & Laptiev, O. (2026). Improving resistance to Sybil attacks in decentralized networks using the RTCT protocol. In Proceedings of the Workshop on Cyber Security and Data Protection (CSDP 2026), Lviv, Ukraine, May 7, 2026 (CEUR Workshop Proceedings, Vol. 4223, pp. 55–72). CEUR-WS.org. https://ceur-ws.org/Vol-4223/paper5.pdf
Огієвич, Р., & Пархоменко, І. (2026). Адаптивна багатокритеріальна оптимізація RTCT-перевірки в децентралізованих оверлейних мережах. Наукоємні технології, 71(3), 373–381. https://doi.org/10.18372/2310-5461.71.21453
Li, F., Mittal, P., Caesar, M., & Borisov, N. (2012). SybilControl: Practical Sybil defense with computational puzzles. In Proceedings of the Seventh ACM Workshop on Scalable Trusted Computing (STC ’12) (pp. 67–78). ACM. https://doi.org/10.1145/2382536.2382548
Boneh, D., Bonneau, J., Bünz, B., & Fisch, B. (2018). Verifiable delay functions. In Advances in Cryptology – CRYPTO 2018, LNCS 10991 (pp. 757–788). Springer. https://doi.org/10.1007/978-3-319-96884-1_25
Biryukov, A., Dinu, D., & Khovratovich, D. (2016). Argon2: New generation of memory-hard functions for password hashing and other applications. In 2016 IEEE European Symposium on Security and Privacy (EuroS&P) (pp. 292–302). IEEE. https://doi.org/10.1109/EuroSP.2016.31
Budish, E. (2025). Trust at scale: The economic limits of cryptocurrencies and blockchains. The Quarterly Journal of Economics, 140(1), 1–62. https://doi.org/10.1093/qje/qjae033
Trautwein, D., Ihle, C., Schubotz, M., Breitinger, C., & Gipp, B. (2026). Large-scale measurement of NAT traversal for the decentralized web: A case study of DCUtR in IPFS. In Proceedings of the 2026 ACM Internet Measurement Conference (IMC ’26) (pp. 779–794). ACM. https://doi.org/10.1145/3777912.3809138
Sevast’yanov, B. A. (1957). An ergodic theorem for Markov processes and its application to telephone systems with refusals. Theory of Probability & Its Applications, 2(1), 104–112. https://doi.org/10.1137/1102005
Jagerman, D. L. (1974). Some properties of the Erlang loss function. Bell System Technical Journal, 53(3), 525–551. https://doi.org/10.1002/j.1538-7305.1974.tb02756.x
Boyd, S., & Vandenberghe, L. (2004). Convex optimization. Cambridge University Press. https://doi.org/10.1017/CBO9780511804441
Eurostat. (2026, May 8). Non-household electricity prices in 2nd half of 2025: −3.5% [News article]. https://ec.europa.eu/eurostat/web/products-eurostat-news/w/ddn-20260508-2
Hetzner Online GmbH. (2026). Hetzner price adjustment 15 June 2026. Hetzner Docs. Retrieved October 13, 2026, from https://docs.hetzner.com/general/infrastructure-and-availability/price-adjustment/
Hetzner Online GmbH. (2022). Overview [Cloud servers: Primary IPs]. Hetzner Docs. Retrieved October 13, 2026, from https://docs.hetzner.com/cloud/servers/overview/
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Роман Огієвич, Іван Пархоменко

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.