Poster: Mixing Confidential Transactions: Comprehensive Transaction Privacy for Bitcoin
نویسندگان
چکیده
The public nature of the blockchain has been shown to be a severe threat for the privacy of Bitcoin users. Even worse, since funds can be tracked and tainted, no two coins are equal, and fungibility, a fundamental property required in every currency, is at risk. With these threats in mind, several privacyenhancing technologies have been proposed to make Bitcoin more private. However, they either require a deep redesign of the currency, breaking many currently deployed features, or they address only specific privacy issues and consequently provide only very limited guarantees when deployed separately. The goal of this work is to overcome this trade-off. Building on CoinJoin, we design ValueShuffle, the first coin mixing protocol compatible with Confidential Transactions, a proposal to hide payment values in transactions. ValueShuffle ensures a mixing participant’s anonymity and the confidentiality of her payment values not only against an attacker observing the blockchain but also against the other possibly malicious mixing participants and against network attackers. By combining ValueShuffle with the proposal for Confidential Transactions and additionally Stealth Addresses, our solution provides comprehensive privacy (payer anonymity, payee anonymity, and payment value privacy) without breaking with the design or the features of Bitcoin. We demonstrate that the combination of these three privacyenhancing technologies creates synergies that overcome the two major obstacles which so far have prohibited the deployment of coin mixing in practice, namely that users need to mix funds of the same value, and need to do so before they can actually spend the funds. As a result, our approach unleashes the full potential of coin mixing as a privacy solution for Bitcoin.
منابع مشابه
Mixing Confidential Transactions: Comprehensive Transaction Privacy for Bitcoin
The public nature of the blockchain has been shown to be a severe threat for the privacy of Bitcoin users. Even worse, since funds can be tracked and tainted, no two coins are equal, and fungibility, a fundamental property required in every currency, is at risk. With these threats in mind, several privacy-enhancing technologies have been proposed to improve transaction privacy in Bitcoin. Howev...
متن کاملCompact Confidential Transactions for Bitcoin
An enhancement is suggested to make Bitcoin transaction amounts hidden to all but the sender and receiver. In each transaction, the output amounts are encrypted with the public keys of the respective receivers. Only the transaction fee is publicly revealed, to allow miners to prioritise transactions. A homomorphic commitment for each transaction proves that the sum of the transaction inputs mat...
متن کاملConfidential Assets
Bitcoin is an online distributed ledger in which coins are distributed according to the unspent transaction output (UTXO) set, and transactions describe changes to this set. Every UTXO has associated to it an amount and signature verification key, representing the quantity that can be spent and the entity authorized to do so, respectively. Because the ledger is distributed and publicly verifiab...
متن کاملCoinShuffle: Practical Decentralized Coin Mixing for Bitcoin
The decentralized currency network Bitcoin is emerging as a potential new way of performing financial transactions across the globe. Its use of pseudonyms towards protecting users’ privacy has been an attractive feature to many of its adopters. Nevertheless, due to the inherent public nature of the Bitcoin transaction ledger, users’ privacy is severely restricted to linkable anonymity, and a fe...
متن کاملPoster: Towards Blockchain Transaction Privacy
Blockchains allow users to transfer money securely to possibly unknown and untrusted counterparties, without requiring a trusted intermediary. Transactions contain the value being transferred, and sender and recipient identifiers (known as addresses) in the clear, meaning that although onchain addresses are unlinked from off-chain identities, monetary movements are easily traceable. We explore ...
متن کامل