Overview

A public randomness beacon is a service that periodically emits random values which anyone can observe, that no single party can predict or influence in advance, and that anyone can independently verify after the fact. Public randomness solves a trust problem: a private random number generator asks you to trust that its output was fair, while a public beacon draws its randomness from events out in the open that nobody controls. That property matters wherever fairness must be demonstrable rather than assumed, such as lotteries, random selection, sortition, and leader election. Truestamp captures values from several independent public randomness sources and folds them into its evidence so that its records inherit the same unpredictable, publicly checkable character.

Security properties of a good beacon

A randomness beacon is only useful if its outputs are hard to game. The literature on public randomness converges on a small set of properties that a trustworthy beacon should satisfy, and they are worth defining precisely because each one closes a different attack.

• Unpredictability. Nobody can compute or narrow down a future beacon value ahead of time. An adversary who has watched every past value still cannot predict the next one. This is what lets a beacon value act as a proof that some data was chosen or submitted after the value existed, rather than before.
• Bias-resistance (unbiasability). No participant, including the beacon operator, can nudge the output toward a preferred result, and no participant can selectively abort to re-roll an unfavorable one. The output distribution stays uniform regardless of who is watching or wants what.
• Public verifiability. Anyone can check, from public data alone, that a published value was produced correctly. Verification does not require trusting the operator or holding a secret.
• Availability. Values are produced on a predictable cadence and remain publicly accessible, so a consumer can always obtain the value it needs.

These are conceptual properties of the randomness sources themselves. How strongly any particular source delivers them depends on the source: a proof-of-work chain earns unpredictability from the cost of finding a block, while a signed government beacon earns it from a keyed construction. External research on beacon design is listed under Citations.

Unpredictability and temporal proof

The most useful consequence of unpredictability is that a beacon value doubles as a timestamp lower bound. Because a value cannot be known before it is published, any data that incorporates that value must have been assembled afterward. This is the cryptographic version of the classic “proof of life” trick, where a person holds up a current newspaper: the newspaper carries information that could not have been known in advance, so the photo must be recent. A beacon value plays the newspaper’s role, except it is machine-verifiable and cannot be forged.

Truestamp uses this to prove submission timing. A record that is bound to a beacon value is proven to have been submitted after that value existed, and, when bracketed by a later value, to have existed before the second one. This is a proof about the submission window, not about when the underlying data was first authored. For the timing guarantee in full, see the submission window, and for the boundaries of what that proof does and does not establish, see what Truestamp does not prove.

How Truestamp uses public randomness

Truestamp does not run its own beacon from scratch. Instead it observes values from several independent public randomness sources, records each observation, and commits those records into its own evidence. Three source families feed the system today: a government-operated randomness beacon that publishes signed pulses, a distributed consensus ledger, and a proof-of-work blockchain. Each captured observation carries the raw source data plus a hash of that data, so the observation is a faithful, checkable copy of what the public source emitted.

Each observation is committed into a Truestamp block through inclusion in the block’s Merkle tree, which binds the observation to a specific point in the block history. Because the source values are unpredictable before they are finalized, and because the observations are recorded rather than invented, the evidence Truestamp produces inherits the beacon properties above. The individual sources and their capture behavior are covered by a sibling concept on entropy sources, and the public page that surfaces these values is covered by the beacon page concept.

Public verifiability in practice

Public verifiability is not just a design goal for Truestamp; it is enforced by the data model. Entropy observations are public data. Anyone can read them, and each observation can be re-checked two ways: an internal check re-canonicalizes the stored source data and recomputes its hash to confirm the stored hash matches, and an external check compares the stored values against the original public source (for example a government beacon endpoint or a public block explorer). Neither check requires a secret or trust in Truestamp; both rely only on public data and standard hashing, which is exactly what public verifiability means.

Use cases

The value of a public beacon is that it lets mutually distrustful parties agree that an outcome was fair without a trusted referee. Common uses include:

• Fair lotteries and drawings. Announce in advance which future beacon value will decide the outcome, wait for it to be published, then derive the result from it. The organizer cannot rig a value that does not exist yet, and every participant can re-derive the result.
• Random selection and sortition. Assign people to groups, sample participants for a study, or pick an arbitrator, with a publicly checkable derivation instead of an unauditable coin flip.
• Leader election and coordination. Choose a coordinator or allocate a scarce resource in a way no participant can steer.
• Reproducible research. Publish the beacon value used so that a randomized procedure can be replayed and independently confirmed.

In every case the beacon’s unpredictability prevents manipulation before the fact, and its public verifiability lets anyone confirm fairness after the fact.

Limitations

A public beacon proves that a value existed and was unpredictable beforehand; it does not prove why a value was chosen or that a party incorporated it honestly into an unrelated decision. Truestamp’s evidence proves submission timing relative to committed values, not the creation time of the underlying data, and not authorship. The strength of the unpredictability guarantee is inherited from the underlying public sources, so it is only as strong as those sources collectively are; capturing from multiple independent families is a deliberate hedge against any single source weakening.

Citations

1. Wesolowski, Public Randomness Beacons (NIST Random Bit Generation Workshop, 2016). Frames the beacon security properties (unpredictability, public verifiability, unbiasability, availability) used above.
2. Lenstra and Wesolowski, A Random Zoo: Sloth, Unicorn, and Trx (IACR ePrint 2015/366). Discusses trustworthy generation of public random numbers and the delay-function constructions behind bias-resistance.
3. NIST Randomness Beacon. A government-operated public randomness service emitting cryptographically signed pulses at a fixed cadence, one of the public sources Truestamp observes.