Onion Message Jamming in the Lightning Network

The discussion highlights the distinct challenges and potential solutions associated with handling onion messages (OMs) and hash time-locked contracts (HTLCs) within network protocols, particularly focusing on their susceptibility and defense mechanisms against denial-of-service (DoS) attacks. HTLCs involve monetary transactions that inherently include incentives and guarantees such as fees and timeouts due to the liquidity committed by the sender. In contrast, OMs are stateless, one-off packets that do not retain value or leave a trace post-transmission, complicating the application of similar defensive strategies used in HTLCs.

One proposed method to combat network level DoS attacks involves the use of forwarding passes or e-cash, which necessitates nodes to acquire credentials for every other node they might interact with. This system embeds real value into the process through forwarding fees, theoretically enhancing network security. However, this approach introduces significant barriers including high initial acquisition thresholds and complex privacy trade-offs, as highlighted in a referenced academic paper (this paper). The necessity of acquiring a credential from all routing nodes adds complexity and potential new vectors for attack, such as adversaries tricking nodes into over-purchasing useless tokens.

Additionally, the possibility of integrating error and failure signals into OMs was discussed, which could help in attributing failures to specific nodes and aid in better routing decisions. However, such mechanisms would reintroduce state per message and potentially expand the surface for amplification attacks. Without strong incentives for nodes to return errors, the effectiveness of this strategy may be limited.

Finally, the conversation touches upon the potential need to re-envision OMs as part of a more complex, stateful system that might abandon some of their original lightweight properties. Suggestions include transforming OMs into a layered overlay that requires authenticated links and possibly metered connections, which could allow for more direct DoS protection mechanisms but at the cost of increased complexity and departure from the original simplicity of OMs.

In summary, while both HTLCs and OMs face challenges from DoS attacks, their inherent differences necessitate distinct approaches to security. The deployment of credential-based systems presents promising yet complex solutions, and any effective strategy will likely need to integrate closely with underlying channel mechanisms that ensure accountability and cost implications for participants.