See Minimal VDF randomness beacon. We’re planning to use the Wesolowski VDF with an RSA modulus obtained via an MPC (in a similar vein to Zcash’s Powers of Tau). Class groups are an option but have tradeoffs.
3 Likes