Coin-Flip Protocol Sample Clauses

Coin-Flip Protocol. We describe a protocol to generate a sequence of coins. We denote the sub-protocol to generate the i-th instance of the coin by CoinFlip(i). The coin-flip subroutine ensures that, in each instance i, (1) all honest parties output the same coin and (2) until the first honest party calls CoinFlip(i), the output of CoinFlip(i) is uniform. The coin-flip protocol uses as setup a committee of κ parties, where each party holds a signed coin share (see Appendix B.1 for a definition of secret-sharing). Parties then simply send the coin-share to all parties, and reconstruct the uniquely determined coin value.