Breaking Omertà: On Threshold Cryptography, Smart Collusion, and Whistleblowing

Cryptographic protocols often make honesty assumptions---e.g., fewer than t out of n participants are adversarial. In practice, these assumptions can be hard to ensure, particularly given monetary incentives for participants to collude and deviate from the protocol.