puzzle with a solution s that remains hidden until time T has elapsed. The solution is
required to be concealed from the eyes of any algorithm running in (parallel) time less than
T. We put forth the concept of homomorphic time-lock puzzles, where one can evaluate
functions over puzzles without solving them, ie, one can manipulate a set of puzzles with
solutions (s_1,\dots, s_n) to obtain a puzzle that solves to f (s_1, ..., s_n), for any function f …