メインコンテンツまでスキップ

Posterior Corruption

An attack where the adversary buys or steals signing keys from people who held large stake in the past but no longer do.

Once a stakeholder has moved on (sold their ada, lost interest, or simply stopped running their wallet), their old signing keys lose value to them. A posterior corruption attack collects those dormant keys cheaply and uses them to forge an alternate history in which those past stakeholders re-cast blocks they never actually produced.

Cardano blocks the attack with key-evolving signatures: as the protocol advances through KES periods (about 1.5 days each, 129,600 slots), a stake pool evolves its signing key and erases the previous key state. An attacker who later buys an old key cannot use it to sign historic blocks, because the key that signed those past periods no longer exists.

Explore next