CoinJoin
CoinJoin is an anonymization method for bitcoin transactions proposed by Gregory Maxwell. The following idea is behind CoinJoin: «When you want to make a payment, find someone else who also wants to make a payment and make a joint payment together».[1] In case of such a joint payment there will be no way to relate input and outputs in one bitcoin transaction and thus the exact direction of money movement will remain unknown to the third party.
There are several implementation of anonymous bitcoin transactions inspired by CoinJoin: SharedCoins,[2] Dark Wallet,[3] CoinShuffle,[4] DarkSend feature of Dash and JoinMarket.[5]
CoinJoin-based mixing methods increase privacy for everybody - even those not using mixing, because it's no longer likely that all inputs to a transaction come from a single wallet, and hence you can no longer associate them to a single person.[6]
CoinShuffle
CoinShuffle is proposed by researchers from Saarland University in 2014.[7] It further develops CoinJoin concept and increases privacy by not requiring any trusted third-party to be involved into mixed transaction creation. In the original research paper presented at the 19th European Symposium on Research in Computer Security CoinShuffe is described as a completely decentralized coin mixing protocol «inspired by CoinJoin to ensure security against theft and by the accountable anonymous group communication protocol Dissent to ensure anonymity as well as robustness against DoS attacks».[7]
Only proof-of-concept implementation of CoinShuffle protocol is available at the moment. It is claimed to be written purely to evaluate the feasibility and performance.[8]
Security issues
CoinJoin requires that users negotiate transactions they wish to join. The first services to handle this (such as blockchain.info's SharedCoin) used centralized servers and required users to trust the operator of the service not to steal the bitcoin or allow others to do so. Centralized services may also compromise participants' privacy by keeping logs of the transactions they negotiate.[9] Decentralized implementations of CoinJoin such as JoinMarket attempt to circumvent various issues related to centralization.[5]
The level of anonymity offered by CoinJoin can also be diminished if the protocol is implemented incorrectly. One such flaw was identified in blockchain.info's SharedCoin mixing service. Security consultant Kristov Atlas,[10] author of the book Anonymous Bitcoin,[11] detailed the flaw in an article entitled Weak Privacy Guarantees for SharedCoin Mixing Service.[12] Here he states "the SharedCoin service should be used only as a light protective measure for financial privacy". As part of his research the author developed a tool called 'CoinJoin Sudoku'[13] that could identify SharedCoin transactions and detect relationships between specific payments and payees.[14]
See also
References
- ↑ Gregory Maxwell (2013-08-22). "CoinJoin: Bitcoin privacy for the real world". bitcointalk.org.
- ↑ "Shared Coin - Free Trustless Private Bitcoin Transactions". SharedCoin site.
- ↑ Andy Greenberg (2014-04-29). "'Dark Wallet' Is About to Make Bitcoin Money Laundering Easier Than Ever". wired.com.
- ↑ Kyle Torpey (2015-01-27). "CoinShuffle Aims to Improve Privacy in Bitcoin". Inside Bitcoins.
- 1 2 "Joinmarket - Coinjoin that people will actually use". Bitcoin Talk. 2015-01-09.
- ↑ "Blockchain.info implements CoinJoin for free to fight CoinValidation". Reddit.com.
- 1 2 Ruffing, Tim; Moreno-Sanchez, Pedro; Kate, Aniket (2014-08-14), CoinShuffle: Practical Decentralized Coin Mixing for Bitcoin (PDF)
- ↑ "CoinShuffle project page at Saarland University (CoinShuffle: Practical Decentralized Bitcoin Mixing)". crypsys.mmci.uni-saarland.de.
- ↑ Jon Matonis (2014-03-17). "A Taxonomy of Bitcoin Mixing Services for Policymakers". CoinDesk.com.
- ↑ "Kristov Atlas at GitHub". GitHub.com.
- ↑ "About the Author – Anonymous Bitcoin Book". anonymousbitcoinbook.com.
- ↑ Kristov Atlas (2014-06-09). "Kristov Atlas Security Advisory <20140609-0>, Weak Privacy Guarantees for SharedCoin Mixing Service".
- ↑ "CoinJoin Sudoku - Weaknesses in SharedCoin, and CoinJoin research.".
- ↑ Jon Southurst (2014-06-10). "Blockchain's SharedCoin Users Can Be Identified, Says Security Expert". CoinDesk.com.