Monotone Erasure Codes
Pith reviewed 2026-05-22 04:46 UTC · model grok-4.3
The pith
Monotone erasure codes can be constructed for any access structure given by a monotone Boolean formula, supporting arbitrary trust assumptions in storage systems.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
For any access structure specified by a monotone Boolean formula, a monotone erasure code exists that recovers the data if and only if the set of nodes satisfies the formula. Linear versions of these codes can be constructed efficiently using linear algebra over finite fields for any such structure, and for partitioned access structures this construction achieves minimal storage overhead. These codes in turn support a generalized AVID primitive with reduced communication costs compared to threshold-based versions.
What carries the argument
Monotone erasure codes, which encode data such that it is recoverable precisely when the participating nodes form an authorized set under the given monotone access structure.
If this is right
- Any monotone access structure admits an efficient construction of a corresponding linear monotone erasure code.
- Partitioned access structures allow constructions with minimal storage overhead.
- Monotone erasure codes enable a generalized AVID that is communication-efficient.
- This supports more flexible reliable broadcast and consensus protocols under non-threshold failure assumptions.
Where Pith is reading between the lines
- Implementations could adapt existing erasure code libraries to handle Boolean formula-based access structures for practical deployment.
- Testing recovery guarantees on sample access structures would validate the linear algebra approach.
- The generalization might extend to other coding primitives beyond AVID in distributed systems.
Load-bearing premise
That standard linear algebra operations over a finite field can always produce a valid encoding meeting the exact recovery guarantees required by the monotone Boolean formula access structure.
What would settle it
A counterexample access structure defined by a monotone formula where either no linear encoding satisfies the recovery condition or the proposed algorithm fails to generate one that does.
Figures
read the original abstract
Erasure codes are a critical component in reliable storage systems today, and many blockchain systems use consensus protocols that involve erasure codes to reduce their communication cost. Existing erasure codes rely on a threshold failure assumption, but recent blockchain systems have departed from this simple model and use generalized failure assumptions. This paper introduces monotone erasure codes that respect arbitrary trust assumptions on a set of nodes. The paper first describes a method for constructing a monotone erasure code from any access structure given by a monotone Boolean formula. Next, the relevant notion of a linear monotone erasure code is introduced, which works on vectors over a finite field and where the encoding is a linear operation. We then focus on constructing linear monotone erasure codes: We give an efficient algorithm to construct linear monotone erasure codes for any access structure, and we show how to efficiently construct linear monotone erasure codes for the special case of partitioned access structures with minimal storage overhead. Last but not least, this work also shows how to use monotone erasure codes to obtain a communication-efficient, generalized version of the well-known asynchronous verifiable information dispersal (AVID) primitive, which is a key building block for developing efficient reliable broadcast and consensus protocols.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper introduces monotone erasure codes that respect arbitrary trust assumptions on a set of nodes, given by monotone Boolean formulas. It describes a method to construct such codes from any access structure, defines linear monotone erasure codes over finite fields, provides an efficient algorithm to construct linear versions for arbitrary access structures, gives a specialized efficient construction for partitioned access structures with minimal storage overhead, and shows how to apply monotone erasure codes to obtain a communication-efficient generalized version of asynchronous verifiable information dispersal (AVID).
Significance. If the constructions and algorithm are shown to be correct, the work could enable erasure coding under generalized (non-threshold) failure assumptions, which is relevant for blockchain and distributed consensus protocols that already use erasure codes to reduce communication. The explicit algorithm for arbitrary access structures and the AVID generalization are potential strengths, provided they include correctness arguments and field-size bounds.
major comments (1)
- [algorithm for any access structure] The algorithm for constructing linear monotone erasure codes for any access structure (described after the definition of linear monotone erasure codes): the recovery guarantee requires that every authorized set induces a submatrix of full column rank while unauthorized sets do not, yet the description relies on standard linear-algebra operations over a finite field without stating a field-size lower bound or a deterministic method (such as explicit Vandermonde or random selection from a sufficiently large field) to ensure the required independence relations for arbitrary formulas. This is load-bearing for the central claim that the algorithm produces valid encodings meeting the recovery condition.
minor comments (1)
- [Abstract] The abstract and introduction would benefit from a small concrete example (e.g., a 3-node access structure with its encoding matrix) to illustrate how the linear construction satisfies the monotone recovery property.
Simulated Author's Rebuttal
We thank the referee for their thorough review and constructive comments on our manuscript. We address the major comment point by point below and outline the revisions we will make to strengthen the presentation of the algorithm for linear monotone erasure codes.
read point-by-point responses
-
Referee: The algorithm for constructing linear monotone erasure codes for any access structure (described after the definition of linear monotone erasure codes): the recovery guarantee requires that every authorized set induces a submatrix of full column rank while unauthorized sets do not, yet the description relies on standard linear-algebra operations over a finite field without stating a field-size lower bound or a deterministic method (such as explicit Vandermonde or random selection from a sufficiently large field) to ensure the required independence relations for arbitrary formulas. This is load-bearing for the central claim that the algorithm produces valid encodings meeting the recovery condition.
Authors: We agree with the referee that an explicit field-size bound and a clear method for ensuring the required linear independence are necessary to make the correctness of the algorithm fully rigorous. In the revised manuscript, we will add a dedicated paragraph immediately following the algorithm description that specifies the construction operates over a finite field F_q with q > n (where n is the number of nodes), chosen large enough to guarantee the existence of suitable coefficients. We will explain that the algorithm assigns random elements from F_q to the encoding matrix entries corresponding to each variable in the monotone Boolean formula, and that by the Schwartz-Zippel lemma (or a union bound over all minimal authorized and maximal unauthorized sets), the probability that any required rank condition fails is at most O(1/q). We will also note that a deterministic construction is possible by enumerating a sufficiently large field and selecting a Vandermonde-like matrix that satisfies the rank conditions for the given access structure, at the cost of a larger but still polynomial field size. A short proof sketch will be included showing why authorized sets yield full column rank and unauthorized sets do not, thereby supporting the central claim. revision: yes
Circularity Check
No significant circularity; explicit constructive algorithm is self-contained.
full rationale
The paper presents a direct algorithmic construction of linear monotone erasure codes from an arbitrary monotone Boolean formula representing the access structure, together with a specialized efficient construction for partitioned access structures that minimizes storage overhead. These steps rely on standard linear-algebra operations over a finite field to enforce the required recovery properties for authorized sets and non-recovery for unauthorized sets. No load-bearing step reduces by the paper's own equations to a fitted parameter, a self-referential definition, or a chain of self-citations whose validity is presupposed by the present work. The central claims are therefore independent of any circular reduction and rest on the external correctness of the described linear encoding procedure.
Axiom & Free-Parameter Ledger
axioms (2)
- domain assumption Linear operations over a finite field produce a valid encoding whose recovery properties match the given monotone access structure.
- domain assumption Monotone Boolean formulas correctly capture the authorized sets for recovery in the target trust model.
invented entities (1)
-
monotone erasure code
no independent evidence
Lean theorems connected to this paper
-
IndisputableMonolith/Foundation/RealityFromDistinction.leanreality_from_one_distinction unclear?
unclearRelation between the paper passage and the cited Recognition theorem.
We give an efficient algorithm to construct linear monotone erasure codes for any access structure... using Vandermonde matrices and Kronecker products on the access tree
-
IndisputableMonolith/Cost/FunctionalEquation.leanwashburn_uniqueness_aczel unclear?
unclearRelation between the paper passage and the cited Recognition theorem.
optimal linear monotone erasure code... solving a rational linear programming problem
What do these tags mean?
- matches
- The paper's claim is directly supported by a theorem in the formal canon.
- supports
- The theorem supports part of the paper's argument, but the paper may add assumptions or extra steps.
- extends
- The paper goes beyond the formal theorem; the theorem is a base layer rather than the whole result.
- uses
- The paper appears to rely on the theorem as machinery.
- contradicts
- The paper's claim conflicts with a theorem or certificate in the canon.
- unclear
- Pith found a possible connection, but the passage is too broad, indirect, or ambiguous to say the theorem truly supports the claim.
Reference graph
Works this paper leans on
-
[1]
Do Not Trust in Numbers: Practical Distributed Cryptography with General Trust
O. Alpos and C. Cachin. “Do Not Trust in Numbers: Practical Distributed Cryptography with General Trust”. In:Stabilization, Safety, and Security of Distributed Systems - 25th International Symposium, SSS 2023, Jersey City, NJ, USA, October 2-4, 2023, Proceedings. Ed. by S. Dolev and B. Schieber. Lecture Notes in Computer Science. Springer, 2023, pp. 536–5...
work page 2023
-
[2]
Secure Schemes for Secret Sharing and Key Distribution
A. Beimel. “Secure Schemes for Secret Sharing and Key Distribution”. PhD thesis. Technion, 1996.url:https://www.cs.bgu.ac.il/ ˜beimel/Papers/thesis.pdf
work page 1996
-
[3]
Generalized Secret Sharing and Monotone Functions
J. C. Benaloh and J. Leichter. “Generalized Secret Sharing and Monotone Functions”. In:Advances in Cryptology - CRYPTO ’88, 8th Annual International Cryptology Conference, Santa Barbara, California, USA, August 21-25, 1988, Proceedings. Ed. by S. Goldwasser. Lecture Notes in Computer Science. Springer, 1988, pp. 27–35.doi:10.1007/0-387-34799-2\_3
-
[4]
Asynchronous Byzantine Agreement Protocols
G. Bracha. “Asynchronous Byzantine Agreement Protocols”. In:Inf. Comput.75.2 (1987), pp. 130– 143.doi:10.1016/0890-5401(87)90054-X
-
[5]
Asynchronous Veri.able Information Dispersal
C. Cachin and S. Tessaro. “Asynchronous Veri.able Information Dispersal”. In:24th IEEE Sympo- sium on Reliable Distributed Systems (SRDS 2005),26-28 October 2005, Orlando, FL, USA. IEEE Computer Society, 2005, pp. 191–202.doi:10.1109/RELDIS.2005.9
-
[6]
J. Camenisch, M. Drijvers, T. Hanke, Y. Pignolet, V. Shoup, and D. Williams. “Internet Computer Consensus”. In:PODC ’22: ACM Symposium on Principles of Distributed Computing, Salerno, Italy, July 25 - 29, 2022. Ed. by A. Milani and P. Woelfel. ACM, 2022, pp. 81–91.doi:10.1145/ 3519270.3538430
-
[7]
Celestia Labs.Celestia – Fibre Optic Performance for Millisecond Markets.https://celestia. org. 2026
work page 2026
-
[8]
Simplex Consensus: A Simple and Fast Consensus Protocol
B. Y. Chan and R. Pass. “Simplex Consensus: A Simple and Fast Consensus Protocol”. In:Theory of Cryptography - 21st International Conference, TCC 2023, Taipei, Taiwan, November 29 - December 2, 2023, Proceedings, Part IV. Ed. by G. N. Rothblum and H. Wee. Lecture Notes in Computer Science. Springer, 2023, pp. 452–479.doi:10.1007/978-3-031-48624-1\_17
-
[9]
In 32nd European Conference on Object-Oriented Programming (ECOOP 2018)
P. Civit, M. A. Dzulfikar, S. Gilbert, R. Guerraoui, J. Komatovic, M. Vidigueira, and I. Zablotchi. “Efficient Signature-Free Validated Agreement”. In:38th International Symposium on Distributed Computing, DISC 2024, Madrid, Spain, October 28 - November 1, 2024. Ed. by D. Alistarh. LIPIcs. Schloss Dagstuhl - Leibniz-Zentrum f¨ ur Informatik, 2024, 14:1–14...
- [10]
-
[11]
General Secure Multi-party Computation from any Linear Secret-Sharing Scheme
R. Cramer, I. Damg ˚ard, and U. M. Maurer. “General Secure Multi-party Computation from any Linear Secret-Sharing Scheme”. In:Advances in Cryptology - EUROCRYPT 2000, International Conference on the Theory and Application of Cryptographic Techniques, Bruges, Belgium, May 14-18, 2000, Proceeding. Ed. by B. Preneel. Lecture Notes in Computer Science. Spring...
-
[12]
Walrus: An Efficient Decentralized Storage Network
G. Danezis, G. Giuliari, E. Kokoris-Kogias, M. Legner, J. Smith, A. Sonnino, and K. W¨ ust. “Walrus: An Efficient Decentralized Storage Network”. In:CoRRabs/2505.05370 (2025). arXiv: 2505.05370.doi:10.48550/ARXIV.2505.05370
-
[13]
Network coding for distributed storage systems
A. G. Dimakis, B. Godfrey, Y. Wu, M. J. Wainwright, and K. Ramchandran. “Network coding for distributed storage systems”. In:IEEE Trans. Inf. Theory56.9 (2010), pp. 4539–4551.doi: 10.1109/TIT.2010.2054295
-
[14]
Eigen Labs.EigenDA – State of the Art Data Availability.https://www.eigenda.xyz. 2026. 34
work page 2026
-
[15]
Faster Hash-based Multi-valued Validated Asynchronous Byzantine Agreement
H. Feng, Z. Lu, T. Mai, and Q. Tang. “Faster Hash-based Multi-valued Validated Asynchronous Byzantine Agreement”. In:55th Annual IEEE/IFIP International Conference on Dependable Systems and Networks, DSN 2025, Naples, Italy, June 23-26, 2025. IEEE, 2025, pp. 303–316.doi: 10.1109/DSN64029.2025.00040
-
[16]
Network coding: an instant primer
C. Fragouli, J. L. Boudec, and J. Widmer. “Network coding: an instant primer”. In:Comput. Commun. Rev.36.1 (2006), pp. 63–68.doi:10.1145/1111322.1111337
-
[17]
Theory and practice of verifiable secret sharing
R. Gennaro. “Theory and practice of verifiable secret sharing”. PhD thesis. Massachusetts Institute of Technology, Cambridge (MA), USA, 1996.url:https://hdl.handle.net/1721.1/11014
work page 1996
-
[18]
Shelby: Decentralized Storage Designed to Serve
G. Goren, A. Hariri, T. D. R. Hartley, R. Kappiyoor, A. Spiegelman, and D. Zmick. “Shelby: Decentralized Storage Designed to Serve”. In:CoRRabs/2506.19233 (2025). arXiv:2506.19233. doi:10.48550/ARXIV.2506.19233
-
[19]
Foundations of Data Availability Sampling
M. Hall-Andersen, M. Simkin, and B. Wagner. “Foundations of Data Availability Sampling”. In: IACR Commun. Cryptol.1.4 (2024), p. 34.doi:10.62056/A09QUDHDJ
-
[20]
Player Simulation and General Adversary Structures in Perfect Multiparty Computation
M. Hirt and U. M. Maurer. “Player Simulation and General Adversary Structures in Perfect Multiparty Computation”. In:J. Cryptol.13.1 (2000), pp. 31–60.doi:10.1007/S001459910003
-
[21]
M. Karchmer and A. Wigderson. “On Span Programs”. In:Proceedings of the Eigth Annual Struc- ture in Complexity Theory Conference, San Diego, CA, USA, May 18-21, 1993. IEEE Computer Society, 1993, pp. 102–111.doi:10.1109/SCT.1993.336536
- [22]
-
[23]
I. S. Labs.Storj: A decentralized cloud storage network framework. [Online]. 2018
work page 2018
-
[24]
MiniCast: Minimizing the Communication Complexity of Reliable Broadcast
T. Locher and V. Shoup. “MiniCast: Minimizing the Communication Complexity of Reliable Broadcast”. In:Advances in Cryptology - EUROCRYPT 2025 - 44th Annual International Confer- ence on the Theory and Applications of Cryptographic Techniques, Madrid, Spain, May 4-8, 2025, Proceedings, Part V. Ed. by S. Fehr and P. Fouque. Lecture Notes in Computer Science...
-
[25]
Fast and secure global payments with Stellar
M. Lokhava, G. Losa, D. Mazi `eres, G. Hoare, N. Barry, E. Gafni, J. Jove, R. Malinowsky, and J. McCaleb. “Fast and secure global payments with Stellar”. In:Proceedings of the 27th ACM Symposium on Operating Systems Principles, SOSP 2019, Huntsville, ON, Canada, October 27- 30, 2019. Ed. by T. Brecht and C. Williamson. ACM, 2019, pp. 80–96.doi:10.1145/334...
-
[26]
D. Malkhi and M. K. Reiter. “Byzantine Quorum Systems”. In:Distributed Comput.11.4 (1998), pp. 203–213.doi:10.1007/S004460050050
-
[27]
V. Nikov and S. Nikova.New Monotone Span Programs from Old. Cryptology ePrint Archive, Paper 2004/282. 2004.url:https://eprint.iacr.org/2004/282
work page 2004
-
[28]
A case for redundant arrays of inexpensive disks (RAID),
D. A. Patterson, G. A. Gibson, and R. H. Katz. “A Case for Redundant Arrays of Inexpensive Disks (RAID)”. In:Proceedings of the 1988 ACM SIGMOD International Conference on Management of Data, Chicago, Illinois, USA, June 1-3, 1988. Ed. by H. Boral and P. Larson. ACM Press, 1988, pp. 109–116.doi:10.1145/50202.50214
-
[29]
The InterPlanetary File System and the Filecoin Network
Y. Psaras and D. Dias. “The InterPlanetary File System and the Filecoin Network”. In:50th Annual IEEE-IFIP International Conference on Dependable Systems and Networks, DSN 2020, Valencia, Spain, June 29 - July 2, 2020 - Supplemental Volume. IEEE, 2020, p. 80.doi:10.1109/DSN- S50200.2020.00043
-
[30]
Efficient dispersal of information for security, load balancing, and fault tolerance
M. O. Rabin. “Efficient dispersal of information for security, load balancing, and fault tolerance”. In:J. ACM36.2 (1989), pp. 335–348.doi:10.1145/62044.62050. 35
-
[31]
Polynomial Codes Over Certain Finite Fields
I. S. Reed and G. Solomon. “Polynomial Codes Over Certain Finite Fields”. In:Journal of the Society for Industrial and Applied Mathematics8.2 (1960), pp. 300–304. eprint:https://doi. org/10.1137/0108018.doi:10.1137/0108018
-
[32]
A Survey of the Past, Present, and Future of Erasure Coding for Storage Systems
Z. Shen, Y. Cai, K. Cheng, P. P. C. Lee, X. Li, Y. Hu, and J. Shu. “A Survey of the Past, Present, and Future of Erasure Coding for Storage Systems”. In:ACM Trans. Storage21.1 (2025), 4:1–4:39. doi:10.1145/3708994
-
[33]
V. Shoup. “Sing a Song of Simplex”. In:38th International Symposium on Distributed Computing, DISC 2024, Madrid, Spain, October 28 - November 1, 2024. Ed. by D. Alistarh. LIPIcs. Schloss Dagstuhl - Leibniz-Zentrum f¨ ur Informatik, 2024, 37:1–37:22.doi:10.4230/LIPICS.DISC. 2024.37
-
[34]
Clay Codes: Moulding MDS Codes to Yield an MSR Code
M. Vajha, V. Ramkumar, B. Puranik, G. R. Kini, E. A. Lobo, B. Sasidharan, P. V. Kumar, A. Barg, M. Ye, S. Narayanamurthy, S. Hussain, and S. Nandi. “Clay Codes: Moulding MDS Codes to Yield an MSR Code”. In:16th USENIX Conference on File and Storage Technologies, FAST 2018, Oakland, CA, USA, February 12-15, 2018. Ed. by N. Agrawal and R. Rangaswami. USENIX...
work page 2018
-
[35]
S. Williams, V. Diordiiev, L. Berman, and I. Uemlianin.Arweave: A protocol for economically sustainable information permanence. Arweave Yellow Paper. 2019
work page 2019
-
[36]
Scaling Blockchains with Error Correction Codes: A Survey on Coded Blockchains
C. Yang, K. Chin, J. Wang, X. Wang, Y. Liu, and Z. Zheng. “Scaling Blockchains with Error Correction Codes: A Survey on Coded Blockchains”. In:ACM Comput. Surv.56.6 (2024), 139:1– 139:33.doi:10.1145/3637224. 36
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.