Expand description
Verifiable Delay Function (VDF).
A Wesolowski-style VDF: forces sequential computation (repeated squaring) and produces a proof that the delay was executed.
§Protocol
- Setup: pick RSA modulus N = p * q
- Eval: y = x^(2^T) mod N (requires T sequential squarings)
- Proof: π = x^⌊2^T / l⌋ mod N where l is the prime nearest above hash(y, x)
- Verify: with r = 2^T mod l, check y == π^l · x^r (mod N) (the Wesolowski relation — 2^T = l·q + r and y = (x^q)^l · x^r)