CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij...
Transcript of CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij...
![Page 1: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/1.jpg)
CoinShuffle anonymity in the Block chain
Jan-Willem Selij
July 2, 2015
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 1 / 28
![Page 2: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/2.jpg)
Outline
1 Bitcoin fundamentals
2 Anonymity
3 Mixing
4 CoinShuffleCoinShuffle ProtocolBlock chain anonymity
5 Analysis
6 Improvements
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 2 / 28
![Page 3: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/3.jpg)
Bitcoin 101
A decentralized digital crypto-currency
Transactions
Blocks
Block chain
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 3 / 28
![Page 4: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/4.jpg)
Transaction: Example
Figure: Bitcoin Transaction [2]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 4 / 28
![Page 5: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/5.jpg)
Block chain
Public ledger
Consists of every transaction ever
Addresses may look cryptic but are pseudonymous.
Transactions can be traced back to their very first origin: a miningreward
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 5 / 28
![Page 6: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/6.jpg)
Importance of interchangeable Bitcoins
Taint shows Bitcoin addresses used in the past leading to atransaction. Possibly indicating source.
Effectively the likeliness of a “connection” between a transaction andaddress
Bitcoins can be discriminated this way
Prone to attackers that monitor address belonging to people
Various organizations or individuals like to stay anonymous
What we want: unlink input and output address
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 6 / 28
![Page 7: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/7.jpg)
Mixing Service
Figure: Mixer Example Service [3]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 7 / 28
![Page 8: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/8.jpg)
Related Work
BitIodine / CoinSeer [9] [10]
Mixed results with mixers [7]
Zerocoin / Zerocash [5] [4]
MixCoin / CoinJoin [6] [8]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 8 / 28
![Page 9: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/9.jpg)
CoinShuffle
Does not require a central server to store funds on
Participants do not learn each other’s addresses
Single transaction fee
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 9 / 28
![Page 10: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/10.jpg)
Research Questions
Can a CoinShuffle-transaction as such be detected in the block chain?
Sub questions
In which situations is it possible to detect the transaction, and whatinformation can be derived from this?
If this is the case, what can be done to improve the anonymity?
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 10 / 28
![Page 11: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/11.jpg)
Outline
1 Bitcoin fundamentals
2 Anonymity
3 Mixing
4 CoinShuffleCoinShuffle ProtocolBlock chain anonymity
5 Analysis
6 Improvements
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 11 / 28
![Page 12: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/12.jpg)
CoinShuffle: Transaction Verification
Figure: Transaction Verification [1]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 12 / 28
![Page 13: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/13.jpg)
Outline
1 Bitcoin fundamentals
2 Anonymity
3 Mixing
4 CoinShuffleCoinShuffle ProtocolBlock chain anonymity
5 Analysis
6 Improvements
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 13 / 28
![Page 14: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/14.jpg)
CoinShuffle Test Setup
Figure: CoinShuffle Test setup
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 14 / 28
![Page 15: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/15.jpg)
CoinShuffle Transaction
Figure: CoinShuffle Transaction
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 15 / 28
![Page 16: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/16.jpg)
Analysis
Script checks transactions on recognition points
Positive results on test network
Working on scanning the live Bitcoin network
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 16 / 28
![Page 17: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/17.jpg)
CoinShuffle transaction detection
Figure: CoinShuffle Transaction Detection
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 17 / 28
![Page 18: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/18.jpg)
Improvements
Splitting over multiple hours/days not really possible
Multiple addresses per participant increases detection complexity fromoutside
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 18 / 28
![Page 19: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/19.jpg)
Summary
CoinShuffle-transactions are visible in the Block chain
Amount visible, change addresses can be linked to input
Protocol can be improved by applying Mixer’s techniques
Future Work
Traverse Bitcoin livenet in search for transactions.Make detection harder (protocol modifications)CoinShuffle wallet
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 19 / 28
![Page 20: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/20.jpg)
References I
Coinshuffle: Practical decentralized coin mixing for bitcoin, 2014.http://esorics2014.pwr.wroc.pl/resources/abstracts/
paper236.pdf.
Andreas M. Antonopoulos.Mastering Bitcoin.O’Reilly Media, 2014.
Bitmixer.Bitmixer - how it works?, 2015.https://bitmixer.io/how.html.
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 20 / 28
![Page 21: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/21.jpg)
References II
Christina Garman Matthew Green Ian Miers Eran Tromer EliBen-Sasson, Alessandro Chiesa and Madars Virza.http://zerocash-project.org/media/pdf/zerocash-oakland2014.pdf,2014.http://zerocash-project.org/media/pdf/
zerocash-oakland2014.pdf,.
Matthew Green Ian Miers, Christina Garman and Aviel D. Rubin.Zerocoin: Anonymous distributed e-cash from bitcoin, 2013.http://isi.jhu.edu/~mgreen/ZerocoinOakland.pdf,.
Andrew Miller Jeremy Clark3 Joshua A. Kroll Joseph Bonneau,Arvind Narayanan and Edward W. Felten.Mixcoin: Anonymity for bitcoin with accountable mixes, 2014.
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 21 / 28
![Page 22: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/22.jpg)
References III
Rainer Bhme Malte Mser and Dominic Breuker.An inquiry into money laundering tools in the bitcoin ecosystem,2013.https://maltemoeser.de/paper/money-laundering.pdf.
G. Maxwell.Coinjoin: Bitcoin privacy for the real world, 2013.https://bitcointalk.org/index.php?topic=279249.0.
Federico Maggi Michele Spagnuolo and Stefano Zanero.Bitiodine: Extracting intelligence from the bitcoin network, 2014.https://ifca.ai/fc14/papers/fc14_submission_11.pdf,.
Diana Koshy Philip Koshy and Patrick McDaniel.An analysis of anonymity in bitcoin using p2p network traffic, 2014.http://fc14.ifca.ai/papers/fc14_submission_71.pdf,.
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 22 / 28
![Page 23: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/23.jpg)
CoinShuffle Wallet
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 23 / 28
![Page 24: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/24.jpg)
Block chain
Figure: Bitcoin Block chain [2]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 24 / 28
![Page 25: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/25.jpg)
Mixing Service
Figure: Hypothetical Mixing Service [7]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 25 / 28
![Page 26: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/26.jpg)
CoinShuffle: Announcement
Figure: Announcement [1]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 26 / 28
![Page 27: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/27.jpg)
CoinShuffle: Shuffling
Figure: Shuffling [1]
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 27 / 28
![Page 28: CoinShuffle anonymity in the Block chain · Figure:Transaction Veri cation [1] Jan-Willem Selij CoinShu e anonymity in the Block chain July 2, 2015 12 / 28. Outline 1 Bitcoin fundamentals](https://reader034.fdocuments.net/reader034/viewer/2022050107/5f456709c6b59a4960528233/html5/thumbnails/28.jpg)
CoinShuffle transaction detection
Possible CoinShuffle transaction
Ins: 10 Outs: 20
10 occurrences of 100000000 BTC (1 BTC)
Jan-Willem Selij CoinShuffle anonymity in the Block chain July 2, 2015 28 / 28