Pages:
Author

Topic: Bitcoin Privacy Protocols - page 2. (Read 517 times)

legendary
Activity: 1568
Merit: 6660
bitcoincleanup.com / bitmixlist.org
February 08, 2024, 07:03:08 AM
#10
He even talked about key blinding and group signatures long before Monero and other privacy protocols were introduced in concept:
Crypto may offer a way to do "key blinding".  I did some research and it was obscure, but there may be something there.  "group signatures" may be related.

There's something here in the general area:
http://www.users.zetnet.co.uk/hopwood/crypto/rh/

What we need is a way to generate additional blinded variations of a public key.  The blinded variations would have the same properties as the root public key, such that the private key could generate a signature for any one of them.  Others could not tell if a blinded key is related to the root key, or other blinded keys from the same root key.  These are the properties of blinding.  Blinding, in a nutshell, is x = (x * large_random_int) mod m.

When paying to a bitcoin address, you would generate a new blinded key for each use.

Actually, now that you mentioned it, I don't think key blinding can be done on secp256k1 unless someone finds a deterministic pattern whereby the user can generate multiple public keys that hash into the same address.

But in the process of doing so, SHA256 will probably be broken in the process since patterns would have to be found in a hash function. But it would make the DER signatures virtually indistinguishable from normal signatures as the lowest such public key can be used for them as a sort of standardness rule.
legendary
Activity: 1512
Merit: 7340
Farewell, Leo
February 08, 2024, 06:54:10 AM
#9
My take on it is that he understood that absolute privacy of transactions - be it BTC, fiat, or whatever - naturally opens the doors to a myriad of illicit uses.
I just don't get how you've reached to this conclusion. There is no message of him discouraging the use of absolute privacy tools. To me it rather seems as he saw it as "private enough".

The possibility to be anonymous or pseudonymous relies on you not revealing any identifying information about yourself in connection with the bitcoin addresses you use.  If you post your bitcoin address on the web, then you're associating that address and any transactions with it with the name you posted under.  If you posted under a handle that you haven't associated with your real identity, then you're still pseudonymous.
You could use TOR if you don't want anyone to know you're even using Bitcoin.

He even talked about key blinding and group signatures long before Monero and other privacy protocols were introduced in concept:
Crypto may offer a way to do "key blinding".  I did some research and it was obscure, but there may be something there.  "group signatures" may be related.

There's something here in the general area:
http://www.users.zetnet.co.uk/hopwood/crypto/rh/

What we need is a way to generate additional blinded variations of a public key.  The blinded variations would have the same properties as the root public key, such that the private key could generate a signature for any one of them.  Others could not tell if a blinded key is related to the root key, or other blinded keys from the same root key.  These are the properties of blinding.  Blinding, in a nutshell, is x = (x * large_random_int) mod m.

When paying to a bitcoin address, you would generate a new blinded key for each use.



In my experience, the simple answers are usually the correct ones. Satoshi simply lacked the competence to do that. It wouldn't be surprising. The very first Bitcoin version was quite simple in concept, and if you read the source code, you could tell it was just above the average. He did some mistakes, like the value overflow or reorganizing based on block height instead of chainwork. Maybe he ignored privacy enhancing techniques on purpose, but that's because it would be more difficult to explain to the public. Another guess: Maybe he didn't ignore them on purpose, but simply because it was too late to introduce them at the date he revealed interest about them.
sr. member
Activity: 406
Merit: 896
February 08, 2024, 03:48:17 AM
#8
I believe Satoshi is a privacy expert.
He created an online persona and there is literally nobody else on this planet that knows this persona is linked with the real person behind Satoshi.

Now, let's speculate, just for fun.

1. Intentional choice:
Perhaps Satoshi wanted to increase our need for self-privacy. Perhaps Satoshi knew that privacy can be achieved with Bitcoin, but that it requires a little more effort.

2. Coincidence:
On April 23, 2011, Satoshi said "I have moved on to other things".

Quote
Satoshi Nakamoto <[email protected]>   Sat, Apr 23, 2011 at 3:40 PM
To: Mike Hearn <[email protected]>
I had a few other things on my mind (as always). One is, are you planning on rejoining the community at some point (eg for code reviews), or is your plan to permanently step back from the limelight?

I've moved on to other things.  It's in good hands with Gavin and everyone.

I do hope your BitcoinJ continues to be developed into an alternative client.  It gives Java devs something to work on, and it's easier with a simpler foundation that doesn't have to do everything.  It'll get critical mass when impatient new users can get started using it while the other one is still downloading the block chain.

Perhaps Satoshi decided to add Ring Signatures and Stealth Addresses to Bitcoin when it was already too late. And perhaps Satoshi Nakamoto became Nicolas van Saberhagen and developed CryptoNote which is the base layer of Monero.

Conclusion:
Unfortunately we can only speculate. But, in my opinion, Satoshi knew about Ring Signatures and Stealth Addresses and the reason he didn't add them to Bitcoin was because he knew that people would speculate that Bitcoin is only built to support illicit activities. Some people still believe it today. The reason I am saying that, is that there is a message from Satoshi to Gavin Andresen that says:

Quote
I wish you wouldn’t keep talking about me as a mysterious shadowy figure, the press just turns that into a pirate currency angle. Maybe instead make it about the open source project and give more credit to your dev contributors; it helps motivate them.

It is obvious that Satoshi Nakamoto wanted to develop a transparent way to transact P2P and that would become widely adopted. Perhaps he intentionally added pseudonymity and not untreacability, so that people wouldn't think Bitcoin was only used for illegal activities. But...
hero member
Activity: 2352
Merit: 588
Bitcoin Casino Est. 2013
February 08, 2024, 12:10:16 AM
#7
-snip
Is there any evidence that Satoshi Nakamoto deliberately avoided adding privacy-related protocols and functionality into Bitcoin in order to avoid the ban-hammer?

If so, how did he justify this decision when the very concept of sound money cannot be implemented in an environment where there is no guarantee of absolute transaction privacy?
I think he was a strong advocate for privacy. He reportedly used the IP-masking browser, Tor, for all his public interactions, which is why his public IP address could never be traced back to him.

He introduced password protection to Bitcoin’s JSON-RPC interface, which was crucial for safeguarding user funds, preserving privacy, and ensuring the stable operation of the Bitcoin node. But when it came to incorporating zero-knowledge proofs (ZK-proofs), a privacy protocol, into Bitcoin, Nakamoto expressed difficulty in figuring out how to apply them.

https://cointelegraph.com/magazine/satoshi-nakamoto-zk-proofs-bitcoin
https://news.bitcoin.com/unraveling-the-online-legacy-of-satoshi-nakamoto-bitcoins-mysterious-creator

So, he may have faced technical challenges in implementing certain privacy protocols in Bitcoin.

The absence of certain privacy protocols in Bitcoin does not necessarily mean he deliberately avoided them to evade regulatory scrutiny. It could be due to technical challenges or a different interpretation of what constitutes sound money. However, this is mostly speculation as Nakamoto himself has not publicly stated his reasons.
hero member
Activity: 1098
Merit: 534
February 07, 2024, 11:41:21 PM
#6
Now, the sticking point is that yes, transactions can be followed through the blockchain BUT who/what has ownership of coins cannot be discovered until they are exchanged into fiat or some type of physical goods which can be linked to people & organizations. He wanted to make sure that BTC had that discovery mechanism.
That was so nice of Satoshi Nakamoto. If bitcoin is like monero, it might also not be widely used as it is today. Nearly all countries do not ban bitcoin and the discovery mechanism would be one of the reasons many countries do not ban the coin.

Satoshi understood a lot about privacy and its negative impact. He somehow knew that if Bitcoin's privacy was as completely strong as that of coin like the monero's, it would lead to more illicit activities using Bitcoin.
Exactly. But it is worth knowing that fiat is mostly used for illicit activities today. It is mostly used for money laundry, terrorism financing, ransom and bandits funding etc. So far something is of value and can be easily transfer from one person to another as a money, some people will want to use such thing for illicit activities.

Well I wouldn't say mostly used for illicit activities it is surely used by the entire world basically and is very convenient but in the event that it is used for an illicit purpose it is indeed completely untracable. Bitcoin they can definitely have a much better chance of tracing the owner.In  Cyber insurance policies they also ban the use of XMR the policies will not pay out in any crypto except for Bitcoin. 
legendary
Activity: 1512
Merit: 4795
February 07, 2024, 04:54:56 PM
#5
Now, the sticking point is that yes, transactions can be followed through the blockchain BUT who/what has ownership of coins cannot be discovered until they are exchanged into fiat or some type of physical goods which can be linked to people & organizations. He wanted to make sure that BTC had that discovery mechanism.
That was so nice of Satoshi Nakamoto. If bitcoin is like monero, it might also not be widely used as it is today. Nearly all countries do not ban bitcoin and the discovery mechanism would be one of the reasons many countries do not ban the coin.

Satoshi understood a lot about privacy and its negative impact. He somehow knew that if Bitcoin's privacy was as completely strong as that of coin like the monero's, it would lead to more illicit activities using Bitcoin.
Exactly. But it is worth knowing that fiat is mostly used for illicit activities today. It is mostly used for money laundry, terrorism financing, ransom and bandits funding etc. So far something is of value and can be easily transfer from one person to another as a money, some people will want to use such thing for illicit activities.
hero member
Activity: 1414
Merit: 915
🇺🇦 Glory to Ukraine!
February 07, 2024, 04:25:15 PM
#4
Is there any evidence that Satoshi Nakamoto deliberately avoided adding privacy-related protocols and functionality into Bitcoin in order to avoid the ban-hammer?

I'm not so sure if there's solid proof that Satoshi left out privacy stuff in Bitcoin only to steer clear of regulations.  In 2009, crypto and what it could lead to was pretty much uncharted territory.  Rules from government might not have been a main thing on his mind and  seems he cared more about creating a decentralized and immutable digital currency that didn't rely on centralized entity and couldn't be manipulated or faked.  Maybe those goals took priority over making payments impossible to trace.
sr. member
Activity: 336
Merit: 365
The Alliance Of Bitcointalk Translators - ENG>PID
February 07, 2024, 03:03:40 PM
#3
Of course ones definition of 'illicit activities' and  'The Public Good' largely depends on the individual and their governments...
Bitcoin still has its privacy feature but it isn't as strong as it was before centralized bodies had arrived. Before now, there has always been other ways to increase privacy like use of coinjoins which was introduced in 2013.
Satoshi understood a lot about privacy and its negative impact. He somehow knew that if Bitcoin's privacy was as completely strong as that of coin like the monero's, it would lead to more illicit activities using Bitcoin.

Exchanges must follow government rules and avoid trouble, so they might have to remove coins that offer completely untraceable transactions.
legendary
Activity: 3612
Merit: 2506
Evil beware: We have waffles!
February 07, 2024, 02:16:09 PM
#2
My take on it is that he understood that absolute privacy of transactions - be it BTC, fiat, or whatever - naturally opens the doors to a myriad of illicit uses. Only an immutable and public ledger gives a way to track those uses and yes, if need be, prosecute the folks involved. By being a public ledger he (thought he) removed the ability to use BTC for things that are against 'The Public Good'.

Now, the sticking point is that yes, transactions can be followed through the blockchain BUT who/what has ownership of coins cannot be discovered until they are exchanged into fiat or some type of physical goods which can be linked to people & organizations. He wanted to make sure that BTC had that discovery mechanism.

Of course ones definition of 'illicit activities' and  'The Public Good' largely depends on the individual and their governments...
legendary
Activity: 1652
Merit: 1006
February 07, 2024, 12:51:22 PM
#1
With Binance delisting of XMR, there seems to be a growing trend that coins with privacy protocols are increasingly becoming a target of governments.

Is there any evidence that Satoshi Nakamoto deliberately avoided adding privacy-related protocols and functionality into Bitcoin in order to avoid the ban-hammer?

If so, how did he justify this decision when the very concept of sound money cannot be implemented in an environment where there is no guarantee of absolute transaction privacy?
Pages:
Jump to: