Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There are a number of papers in the literature describing secure/fair coin flipping protocols. Unfortunately in my case, I am looking for coins that are epsilon-biased or epsilon-correlated. I am looking for a coin-flipping protocol that is guaranteed to output correlated and/or biased coins to parties for some pre-agreed levels of correlation or biasing or fail securely.

share|improve this question
Should it reveal all of the coins to every party? $\;$ – Ricky Demer Dec 6 '13 at 0:01
My guess is that it should be easy to turn one into the other using other cryptographic tools, but I'm interested in either case. – Craig Dec 6 '13 at 0:14
I suspect that in the two-party case, giving them distinct but "interestingly"-correlated $\hspace{.95 in}$ random outputs should be sufficient for oblivious transfer. $\:$ – Ricky Demer Dec 6 '13 at 0:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.