open and public settings; in the case of Algorand, secure cryptographic sortition is generated using an elliptic curve-based verifiable random function (ECVRF-ED25519-SHA512-Elligator2[@algorandVRF]); in the case of Snow White, cryptographic committee reconfiguration is done by extracting public keys from the blockchain based on the amount of currency owned. For a detailed comparison of random beacon protocols, see [@cryptoeprint:2018:319].

-   Regular time intervals (also named epochs or rounds) on which randomly selected workers/nodes process the transactions.

-   Faster transaction confirmation and finality.

-   High scalability.

-   Decoupling Sybil-resistance from the consensus mechanism (PoW/PoS is about membership, not consensus).

-   PoW/PoS to protect against Sybil attacks: however, the present paper proposes the use of Zero-Knowledge Proof-of-Identity (i.e., more economically[@stakedPoS] and environmentally efficient[@natureEnergyCarbonCosts; @bitcoinCarbonFootprint]).

X.509 Public Key Infrastructure\[sub:X.509-Public-Key\]
-------------------------------------------------------

X.509 is an ITU-T standard[@x509] defining the format of public key certificates, itself based on the ASN.1 standard[@asn1]: these certificates underpin most implementations of public key cryptography, including SSL/TLS and smartcards. An X.509v3 certificate has the following structure:

Certificates are signed creating a certificate chain: the root certificate of an organization is a self-signed certificate that signs intermediate certificates that themselves are used to sign end-entities certificates. To obtain a signed certificate, the entity creates 