Tuesday, 1/10 (1:30 PM)

• Administrivia

• Money as a social construct

• The network model

• The non-eclipsing assumption

• The gossip protocol

Wednesday, 1/11 (4:30 PM)

Hewlett 201

• Setting up a TypeScript project

• TypeScript basics

• Building your project

Thursday, 1/12 (1:30 PM)

• The adversary A

• The security parameter κ

• The honest protocol Π

• The adversarial model

• Probabilistic polynomial-time adversaries

• Negligible functions

• Game-based security

• Security proofs by computation reduction

• Proofs by contradiction and forward proofs

Friday, 1/13 (12:30 PM)

Hewlett 201

• TCP/IP socket connections

• Establishing a connection

• Receiving and parsing data

Tuesday, 1/17 (1:30 PM)

• The grader will test your node for you to get feedback. This is not graded. Please check out the PSETs tab for more information.

Tuesday, 1/17 (1:30 PM)

• The hash function: H

• Preimage resistance, second preimage resistance, collision resistance

• Collision resistance implies preimage resistance

• Preimage resistance implies second preimage resistance

• Public/private keys

• Signature schemes

• Signature correctness

• Existential unforgeability

• Ledgers

Thursday, 1/19 (1:30 PM)

• The grader will test your node and give you a grade. Please check out the PSETs tab for more information.

Thursday, 1/19 (1:30 PM)

• Transactions

• Inputs and outputs

• The transaction graph

• Change

• Multiple inputs

• Multiple outputs

• The UTXO model

• The law of conservation

• Verifying a transaction

Friday, 1/20 (12:30 PM)

Hewlett 201

• JavaScript promises

• Async/await

• Event emitters

Tuesday, 1/24 (1:15 PM)

• The grader will test your node for you to get feedback. This is not graded. Please check out the PSETs tab for more information.

Tuesday, 1/24 (1:30 PM)

• Views in disagreement

• Double spending

• The network delay Δ

• Simple ideas don't work!

• Rare events

• Blocks

• Proof-of-work

• The mining target T

• The proof-of-work equation

• The mining algorithm

• Block freshness

• The genesis block G

• Chains

Thursday, 1/26 (1:15 PM)

• The grader will test your node and give you a grade. Please check out the PSETs tab for more information.

Thursday, 1/26 (1:30 PM)

• Hash chains

• The number n of parties

• The number t of adversarial parties

• The hashing power q

• Rare events are irregular

• Convergence opportunities and periods of silence

• The honest majority assumption

• The longest chain rule

• Coinbase

• Fees

• Mempools

Tuesday, 1/31 (1:15 PM)

• The grader will test your node for you to get feedback. This is not graded. Please check out the PSETs tab for more information.

Tuesday, 1/31 (1:30 PM)

• Temporary forks

• Convergence

• The Nakamoto race

• Chain Growth, Common Prefix, Chain Quality

• Censorship

• Majority attacks

Thursday, 2/2 (1:15 PM)

• The grader will test your node and give you a grade. Please check out the PSETs tab for more information.

Thursday, 2/2 (1:30 PM)

• Healing

• Macroeconomic supply

• Selfish mining

• Mining pools

Monday, 2/6 (1:15 PM)

• This will be a short theory exercise to help you practice for the exam. Please check out the PSETs tab for more information.

Tuesday, 2/7 (1:30 PM)

• CPU, GPU, ASIC mining

• Incentive compatibility

• Block size limits

• Transaction prioritization by fees

• Macroeconomic policy, reward adjustment

• The difficulty adjustment equation Τ_{j+1} = T_{j} (t_2 - t_1) / (mη)

• Mining pools, the light PoW equation: H(B) ≤ 2^z T

• The pooled mining protocol

• Cold, hot, and hardware wallets

• Wallet seeds, deterministic wallets

Thursday, 2/9 (1:30 PM)

• The account model

• Transactions in the account model

• Balances

• Nonces

• The generic transition function δ

• Blockchain as a State Machine Replication mechanism

• UTXO vs accounts

• The file storage problem

• The Merkle Tree: compress, prove, verify

• Proofs of inclusion, succinctness

• Merkle Tree security proof by reduction from collision-resistant hashes

Monday, 2/13 (1:15 PM)

• This will be a short theory exercise to help you practice for the exam. Please check out the PSETs tab for more information.

Tuesday, 2/14 (1:30 PM)

• More information available on Ed

Thursday, 2/16 (1:30 PM)

• The problem of scalability in blockchains: Scaling computation, communication, and storage

• From x-bar to x using Merkle Trees

• The Simple Payment Verification (SPV) protocol

• The header chain

• Miners, Full Nodes, Light Nodes

• Chain virtues for light nodes

• Privacy concerns for light nodes

• Random Oracles, formally

• The synchrony assumption Δ = 1

Tuesday, 2/21 (1:15 PM)

• The grader will test your node for you to get feedback. This is not graded. Please check out the PSETs tab for more information.

Tuesday, 2/21 (1:30 PM)

• The Environment and the Execution

• The Rushing Adversary

• The Sybil Adversary

• The Network model, the gossiping model

• The Non-Eclipsing Assumption

• The honest backbone protocol

• Maintaining, adopting, and having chains

• Proof-of-work

• The q-bounded Random Oracle

• The Static Difficulty assumption

• Chain validation; the δ* function

• Successful rounds

• Convergence opportunities

• Formal definition of Chain Virtues

• Common Prefix, the parameter k

• Chain Quality, the parameters μ and ℓ

• Chain Growth, the parameters τ and s

• The formal honest majority assumption: t < (1 - δ)(n - t)

• The honest advantage δ

• Convergence Opportunities are useful: The Pairing Lemma and its proof

Thursday, 2/23 (1:15 PM)

• The grader will test your node and give you a grade. Please check out the PSETs tab for more information.

Thursday, 2/23 (1:30 PM)

• Ledger Safety and Liveness, formally. The liveness parameter u.

• Proof of Safety from Common Prefix

• Proof of Liveness from Chain Quality and Chain Growth; u = max((ℓ + k) / τ, s)

• The Chain Growth Lemma and its proof

• The successful round indicator X

• The convergence opportunity indicator Y

• The adversarial success indicator Z

• The expectations of X, Y, and Z

• Bernoulli's inequality

• Lower and upper bounds on the expectation of X

• Lower bounds on the expectation of Y

• Good things converge: The Chernoff bound

• The world is good, usually: Typical executions

• The Chernoff duration λ

• The Chernoff error ε

• Proof of Typicality Theorem

• The Balancing Equation: 3ε + 3f ≤ δ

• A plot of X, Y, and Z with 3f, 3ε and δ

Tuesday, 2/28 (1:15 PM)

• The grader will test your node for you to get feedback. This is not graded. Please check out the PSETs tab for more information.

Tuesday, 2/28 (1:30 PM)

• Reminder of bounds on the expectations of X and Y

• Upper bound on the expectation of Z

• Typical bounds, and proof that Z ≤ Y

• Chains grow: The Chain Growth theorem and its proof

• The Patience Lemma and its proof

• The Common Prefix theorem and its proof

• Discussion on the relationship between ε and λ

• You can't have it all: Discussion on the parametrization options for ε, f, δ

Thursday, 3/2 (1:15 PM)

• The grader will test your node and give you a grade. Please check out the PSETs tab for more information.

Thursday, 3/2

Tuesday, 3/7 (1:15 PM)

• The grader will test your node for you to get feedback. This is not graded. Please check out the PSETs tab for more information.

Tuesday, 3/7 (1:30 PM)

• Proof of Work's perils and environmental impact

• Proof of Work vs Proof of Stake

• Dangers of Proof of Stake

• The Proof of Stake equation

• Lecture notes

Thursday, 3/9 (1:30 PM)

• Proof of Work's perils and environmental impact

• Proof of Work vs Proof of Stake

• Dangers of Proof of Stake

• The Proof of Stake equation

• Lecture notes

Monday, 3/13 (1:15 PM)

• The grader will test your node and give you a grade. Please check out the PSETs tab for more information.

Tuesday, 3/14 (1:30 PM)

• Everything is a Race and Nakamoto Always Wins

• Verifiable Random Functions

• VRF correctness

• The unpredictability game

• Towards instant finality

• Lecture notes

Thursday, 3/16 (1:15 PM)

• This will be a short theory exercise to help you practice for the exam. Please check out the PSETs tab for more information.

Thursday, 3/16 (1:30 PM)

• The Streamlet protocol and its proof of safety

• Accountability and slashing

• Lecture notes

Thursday, 3/16 (3:00 PM)

• This lecture will be held in Room 380-380F (https://25live.collegenet.com/pro/stanford#!/home/location/137/details)

• Permissioned vs Proof of Stake: static vs dynamic stake

• Stake grinding attacks and their mitigations

• Stake unbonding and long range attacks and their mitigations

• Lecture notes

Thursday, 3/16 (4:30 PM)

• This lecture will be held in Room 380-380F (https://25live.collegenet.com/pro/stanford#!/home/location/137/details)

• Permissioned vs Proof of Stake: static vs dynamic stake

• Stake grinding attacks and their mitigations

• Stake unbonding and long range attacks and their mitigations

• Lecture notes

Monday, 3/20 (1:15 PM)

• This will be a short theory exercise to help you practice for the exam. Please check out the PSETs tab for more information.

Tuesday, 3/21

• More information will be posted soon.