Aims

The trusted setup’s queuing strategy should aim for maximal efficiency and throughput of contributions while minimising occurrences of failed or missed contributions. Causes of the latter might be contributions not correctly chaining from the prior contributor, or missed due to the contributor not being online at the time their queue position is reached.

Long queues are more likely to give rise to missed contributions. They also result in confusion and dissatisfaction among contributors.

High volumes of contributors joining in a short period of time will tend to cause race conditions that might result in incorrect chaining.

Missed or invalid contributions do not have a high impact on the success of the ceremony. As long as a valid chain of contributions can be assembled by the coordinator, and one of those contributions has successfully concealed their secret, the result will be secure. The number of such excluded contributions must be small relative to the number of accepted contributions. The strategy and its implementation must avoid all appearances of censorship or systematic exclusion of contributions.

The KZG ceremony will be high-profile, and is expected to attract large numbers of willing, eligible contributors. In past ceremonies we have seen interest concentrate in the periods following an announcement such as a tweet by a prominent community member. It is desirable to convert that interest into valid contributions. However, the ceremony requires a strict chain of contributions - one contribution cannot start until it has possession of the prior contribution. Hence, contributions will be spread out in time.

Proposal

Participants must qualify by signing in. See Contributor Identification. Once signed in, they may join the queue. From this point, the client should remain online until the contribution is complete.

The queue will be maintained by the coordinator. The queue will advance whenever a user completes their contribution or is determined to have left the queue. The latter will occur as a result of the client failing to check in at the required time.

Contributors who leave the queue may rejoin at a later stage. Contributors may contribute only once. Individuals will not be prevented from rejoining under a different ID, subject to passing the anti-sybil tests.

Computation for all the required powers of 2 will be performed together. The contributor will receive the prior SRSs in a single structure, and will return the updated SRSs likewise. A valid contribution requires all 4 contributions to pass validity tests.