references.bib

@misc{chase2019signal,
    title={The Signal Private Group System and Anonymous Credentials Supporting Efficient Verifiable Encryption},
    author={Chase, Melissa and Perrin, Trevor and Zaverucha, Greg},
    year={2019},
    howpublished={Cryptology ePrint Archive, Report 2019/1416},
    url = "https://eprint.iacr.org/2019/1416"
}

@inproceedings{chase2014algebraic,
    author = {Chase, Melissa and Meiklejohn, Sarah and Zaverucha, Greg},
    title = {Algebraic MACs and Keyed-Verification Anonymous Credentials},
    year = {2014},
    isbn = {9781450329576},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    url = {https://eprint.iacr.org/2013/516},
    doi = {10.1145/2660267.2660328},
    booktitle = {Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security},
    pages = {1205–1216},
    numpages = {12},
    keywords = {anonymous credentials, anonymity, mac},
    location = {Scottsdale, Arizona, USA},
    series = {CCS ’14}
}

@inproceedings{chaum1983blind,
    title={Blind signatures for untraceable payments},
    author={Chaum, David},
    booktitle={Advances in cryptology},
    pages={199--203},
    year={1983},
    organization={Springer},
    doi={10.1007/978-1-4757-0602-4_18}
}

@online{mizrahi2013blind,
    title  = "coin mixing using Chaum's blind signatures",
    author = {Mizrahi, Alex},
    year   = {2013},
    url    = "https://bitcointalk.org/index.php?topic=150681.0",
    urldate={2020-05-01},
}

@online{maxwell2013coinjoin,
    title  = {CoinJoin: Bitcoin privacy for the real world},
    author = {Maxwell, Greg},
    year   = {2013},
    url    = "https://bitcointalk.org/index.php?topic=279249.0",
    urldate={2020-05-01},
}

@online{maxwell2016confidential,
    title  = {Confidential Transactions},
    author = {Maxwell, Greg},
    year   = {2016},
    url    = "https://web.archive.org/web/20200502151159/https://people.xiph.org/~greg/confidential_values.txt",
    urldate={2020-05-16},
}


@inproceedings{maurer2017anonymous,
    title={Anonymous CoinJoin transactions with arbitrary values},
    author={Maurer, Felix Konstantin and Neudecker, Till and Florian, Martin},
    booktitle={2017 IEEE Trustcom/BigDataSE/ICESS},
    pages={522--529},
    year={2017},
    organization={IEEE},
    doi={10.1109/Trustcom/BigDataSE/ICESS.2017.280}
}

@online{zerolink,
    title={ZeroLink: The Bitcoin Fungibility Framework},
    author={Ficsor, Adam and TDevD},
    year={2017},
    url="https://github.com/nopara73/ZeroLink",
    urldate={2020-05-01}
}

@online{cashfusion,
    title={CashFusion},
    author={Fyookball, Jonald and Lundeberg, Mark B.},
    year={2019},
    url="https://github.com/cashshuffle/spec",
    urldate={2020-05-01},
}

@InProceedings{ron2013quantitative,
    doi="10.1007/978-3-642-39884-1_2",
    author="Ron, Dorit
    and Shamir, Adi",
    editor="Sadeghi, Ahmad-Reza",
    title="Quantitative Analysis of the Full Bitcoin Transaction Graph",
    booktitle="Financial Cryptography and Data Security",
    year="2013",
    publisher="Springer Berlin Heidelberg",
    address="Berlin, Heidelberg",
    pages="6--24",
    abstract="The Bitcoin scheme is a rare example of a large scale global payment system in which all the transactions are publicly accessible (but in an anonymous way). We downloaded the full history of this scheme, and analyzed many statistical properties of its associated transaction graph. In this paper we answer for the first time a variety of interesting questions about the typical behavior of users, how they acquire and how they spend their bitcoins, the balance of bitcoins they keep in their accounts, and how they move bitcoins between their various accounts in order to better protect their privacy. In addition, we isolated all the large transactions in the system, and discovered that almost all of them are closely related to a single large transaction that took place in November 2010, even though the associated users apparently tried to hide this fact with many strange looking long chains and fork-merge structures in the transaction graph.",
    isbn="978-3-642-39884-1"
}

@inproceedings{meiklejohn2013fistful,
    author = {Meiklejohn, Sarah and Pomarole, Marjori and Jordan, Grant and Levchenko, Kirill and McCoy, Damon and Voelker, Geoffrey M. and Savage, Stefan},
    title = {A Fistful of Bitcoins: Characterizing Payments among Men with No Names},
    year = {2013},
    isbn = {9781450319539},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    doi = {10.1145/2504730.2504747},
    booktitle = {Proceedings of the 2013 Conference on Internet Measurement Conference},
    pages = {127--140},
    numpages = {14},
    keywords = {bitcoin, measurement, anonymity},
    location = {Barcelona, Spain},
    series = {IMC ’13}
}

@inproceedings{moeser2013inquiry,
    title={An inquiry into money laundering tools in the Bitcoin ecosystem},
    author={M{\"o}ser, Malte and B{\"o}hme, Rainer and Breuker, Dominic},
    booktitle={2013 APWG eCrime Researchers Summit},
    pages={1--14},
    year={2013},
    organization={Ieee}
}

@inproceedings{bunz2018bulletproofs,
    title={Bulletproofs: Short proofs for confidential transactions and more},
    author={B{\"u}nz, Benedikt and Bootle, Jonathan and Boneh, Dan and Poelstra, Andrew and Wuille, Pieter and Maxwell, Greg},
    booktitle={2018 IEEE Symposium on Security and Privacy (SP)},
    pages={315--334},
    year={2018},
    organization={IEEE},
    doi={10.1109/SP.2018.00020}
}

@InProceedings{fouque2012indifferentiable,
    doi="10.1007/978-3-642-33481-8_1",
    author="Fouque, Pierre-Alain and Tibouchi, Mehdi",
    editor="Hevia, Alejandro and Neven, Gregory",
    title="Indifferentiable Hashing to Barreto--Naehrig Curves",
    booktitle="Progress in Cryptology -- LATINCRYPT 2012",
    year="2012",
    publisher="Springer Berlin Heidelberg",
    address="Berlin, Heidelberg",
    pages="1--17",
    abstract="A number of recent works have considered the problem of constructing constant-time hash functions to various families of elliptic curves over finite fields. In the relevant literature, it has been occasionally asserted that constant-time hashing to certain special elliptic curves, in particular so-called BN elliptic curves, was an open problem. It turns out, however, that a suitably general encoding function was constructed by Shallue and van de Woestijne back in 2006.",
    isbn="978-3-642-33481-8"
}

@incollection{reid2013analysis,
    doi="10.1007/978-1-4614-4139-7_10",
    title={An analysis of anonymity in the bitcoin system},
    author={Reid, Fergal and Harrigan, Martin},
    booktitle={Security and privacy in social networks},
    pages={197--223},
    year={2013},
    publisher={Springer}
}

@article{ober2013structure,
    doi="10.3390/fi5020237",
    title={Structure and anonymity of the bitcoin transaction graph},
    author={Ober, Micha and Katzenbeisser, Stefan and Hamacher, Kay},
    journal={Future internet},
    volume={5},
    number={2},
    pages={237--250},
    year={2013},
    publisher={Multidisciplinary Digital Publishing Institute}
}

@InProceedings{androulaki2013evaluating,
    doi="10.1007/978-3-642-39884-1_4",
    author="Androulaki, Elli and Karame, Ghassan O. and Roeschlin, Marc and Scherer, Tobias and Capkun, Srdjan",
    editor="Sadeghi, Ahmad-Reza",
    title="Evaluating User Privacy in Bitcoin",
    booktitle="Financial Cryptography and Data Security",
    year="2013",
    publisher="Springer Berlin Heidelberg",
    address="Berlin, Heidelberg",
    pages="34--51",
    abstract="Bitcoin is quickly emerging as a popular digital payment system. However, in spite of its reliance on pseudonyms, Bitcoin raises a number of privacy concerns due to the fact that all of the transactions that take place are publicly announced in the system.",
    isbn="978-3-642-39884-1"
}

@inproceedings{douceur2002sybil,
    doi="10.1007/3-540-45748-8_24",
    author="Douceur, John R.",
    editor="Druschel, Peter and Kaashoek, Frans and Rowstron, Antony",
    title="The Sybil Attack",
    booktitle="Peer-to-Peer Systems",
    year="2002",
    publisher="Springer Berlin Heidelberg",
    address="Berlin, Heidelberg",
    pages="251--260",
    abstract="Large-scale peer-to-peer systems face security threats from faulty or hostile remote computing elements. To resist these threats, many such systems employ redundancy. However, if a single faulty entity can present multiple identities, it can control a substantial fraction of the system, thereby undermining this redundancy. One approach to preventing these ``Sybil attacks'' is to have a trusted agency certify identities. This paper shows that, without a logically centralized authority, Sybil attacks are always possible except under extreme and unrealistic assumptions of resource parity and coordination among entities.",
    isbn="978-3-540-45748-0"
}

@inproceedings{bonneau2014mixcoin,
    title={Mixcoin: Anonymity for bitcoin with accountable mixes},
    author={Bonneau, Joseph and Narayanan, Arvind and Miller, Andrew and Clark, Jeremy and Kroll, Joshua A and Felten, Edward W},
    booktitle={International Conference on Financial Cryptography and Data Security},
    pages={486--504},
    year={2014},
    organization={Springer}
}

@inproceedings{valenta2015blindcoin,
    doi={10.1007/978-3-662-48051-9_9},
    title={Blindcoin: Blinded, accountable mixes for bitcoin},
    author={Valenta, Luke and Rowan, Brendan},
    booktitle={International Conference on Financial Cryptography and Data Security},
    pages={112--126},
    year={2015},
    organization={Springer}
}

@inproceedings{heilman2017tumblebit,
    doi={10.14722/ndss.2017.23086},
    title={Tumblebit: An untrusted bitcoin-compatible anonymous payment hub},
    author={Heilman, Ethan and Alshenibr, Leen and Baldimtsi, Foteini and Scafuro, Alessandra and Goldberg, Sharon},
    booktitle={Network and Distributed System Security Symposium},
    year={2017}
}

@inproceedings{ruffing2014coinshuffle,
    doi={10.1007/978-3-319-11212-1_20},
    title={Coinshuffle: Practical decentralized coin mixing for bitcoin},
    author={Ruffing, Tim and Moreno-Sanchez, Pedro and Kate, Aniket},
    booktitle={European Symposium on Research in Computer Security},
    pages={345--364},
    year={2014},
    organization={Springer}
}

@inproceedings{bissias2014sybil,
    doi={10.1145/2665943.2665955},
    title={Sybil-resistant mixing for bitcoin},
    author={Bissias, George and Ozisik, A Pinar and Levine, Brian N and Liberatore, Marc},
    booktitle={Proceedings of the 13th Workshop on Privacy in the Electronic Society},
    pages={149--158},
    year={2014}
}

@online{devalence2020danake,
    title={Danake},
    author={Henry de Valence},
    year={2020},
    url="https://lightweight.money",
    urldate={2020-06-10}
}

@online{maxwell2013coinswap,
    title={CoinSwap: Transaction graph disjoint trustless trading},
    author={Maxwell, Greg},
    year={2013},
    url="https://bitcointalk.org/index.php?topic=321228.0",
    urldate={2020-07-01}
}

@online{belcher2020design,
    title={Design for a CoinSwap Implementation for Massively Improving Bitcoin Privacy and Fungibility},
    author={Belcher, Chris},
    year={2020},
    url="https://gist.github.com/chris-belcher/9144bd57a91c194e332fb5ca371d0964",
    urldate={2020-07-01}
}

@online{laurentmt2015bitcoin,
    title="Bitcoin Transactions \& Privacy",
    author={Laurent MT},
    year={2015},
    url="https://gist.github.com/LaurentMT/d361bca6dc52868573a2",
    note="(see also \url{https://code.samourai.io/oxt/boltzmann/})",
    urldate={2020-07-01}
}

@inproceedings{davida1997anonymity,
    doi={10.1007/3-540-63594-7_63},
    title={Anonymity control in e-cash systems},
    author={Davida, George and Frankel, Yair and Tsiounis, Yiannis and Yung, Moti},
    booktitle={International Conference on Financial Cryptography},
    pages={1--16},
    year={1997},
    organization={Springer}
}

@article{camenisch1997proof,
    doi={10.3929/ethz-a-006651937},
    title={Proof systems for general statements about discrete logarithms},
    author={Camenisch, Jan and Stadler, Markus},
    journal={Technical Report/ETH Zurich, Department of Computer Science},
    volume={260},
    year={1997},
    publisher={ETH Zurich}
}

@inproceedings{harrigan2016unreasonable,
    doi={10.1109/UIC-ATC-ScalCom-CBDCom-IoP-SmartWorld.2016.0071},
    title={The unreasonable effectiveness of address clustering},
    author={Harrigan, Martin and Fretter, Christoph},
    booktitle={2016 Intl IEEE Conferences on Ubiquitous Intelligence \& Computing, Advanced and Trusted Computing, Scalable Computing and Communications, Cloud and Big Data Computing, Internet of People, and Smart World Congress (UIC/ATC/ScalCom/CBDCom/IoP/SmartWorld)},
    pages={368--373},
    year={2016},
    organization={IEEE}
}

@misc{rogaway2015moral,
    author = {Phillip Rogaway},
    title = {The Moral Character of Cryptographic Work},
    howpublished = {Cryptology ePrint Archive, Report 2015/1162},
    year = {2015},
    url = "https://eprint.iacr.org/2015/1162",
}

@inproceedings{dingledine2006anonymity,
    title={Anonymity Loves Company: Usability and the Network Effect.},
    author={Dingledine, Roger and Mathewson, Nick},
    booktitle={WEIS},
    year={2006},
    url={https://www.freehaven.net/anonbib/cache/oreilly-usability.pdf},
    urldate={2020-07-01}
}

@inproceedings{ziegeldorf2015coinparty,
    doi={10.1145/2699026.2699100},
    author = {Ziegeldorf, Jan Henrik and Grossmann, Fred and Henze, Martin and Inden, Nicolas and Wehrle, Klaus},
    title = {CoinParty: Secure Multi-Party Mixing of Bitcoins},
    year = {2015},
    isbn = {9781450331913},
    publisher = {Association for Computing Machinery},
    address = {New York, NY, USA},
    doi = {10.1145/2699026.2699100},
    booktitle = {Proceedings of the 5th ACM Conference on Data and Application Security and Privacy},
    pages = {75–86},
    numpages = {12},
    keywords = {secure multi-party computation, anonymity, bitcoin},
    location = {San Antonio, Texas, USA},
    series = {CODASPY ’15}
}

@inproceedings{ruffing2017p2p,
    doi={10.14722/ndss.2017.23415},
    title={P2P Mixing and Unlinkable Bitcoin Transactions.},
    author={Ruffing, Tim and Moreno-Sanchez, Pedro and Kate, Aniket},
    booktitle={NDSS},
    pages={1--15},
    year={2017}
}

@article{reed1998anonymous,
  title={Anonymous connections and onion routing},
  author={Reed, Michael G and Syverson, Paul F and Goldschlag, David M},
  journal={IEEE Journal on Selected areas in Communications},
  volume={16},
  number={4},
  pages={482--494},
  year={1998},
  publisher={IEEE}
}

@book{attiya2004distributed,
  title={Distributed computing: fundamentals, simulations, and advanced topics},
  author={Attiya, Hagit and Welch, Jennifer},
  volume={19},
  year={2004},
  publisher={John Wiley \& Sons}
}

@online{nakamoto2009bitcoin,
  title={Bitcoin: A peer-to-peer electronic cash system},
  author={Nakamoto, Satoshi},
  year={2009},
  url={https://bitcoin.org/bitcoin.pdf},
  doi={10.1.1.221.9986},
}

@inproceedings{badertscher2017bitcoin,
  title={Bitcoin as a transaction ledger: A composable treatment},
  author={Badertscher, Christian and Maurer, Ueli and Tschudi, Daniel and Zikas, Vassilis},
  booktitle={Annual International Cryptology Conference},
  pages={324--356},
  year={2017},
  organization={Springer}
}

@inproceedings{piotrowska2017loopix,
  title={The loopix anonymity system},
  author={Piotrowska, Ania M and Hayes, Jamie and Elahi, Tariq and Meiser, Sebastian and Danezis, George},
  booktitle={26th $\{$USENIX$\}$ Security Symposium ($\{$USENIX$\}$ Security 17)},
  pages={1199--1216},
  year={2017}
}

@INPROCEEDINGS{moeser2017anonymous,
  author={M. {Möser} and R. {Böhme}},
  booktitle={2017 IEEE European Symposium on Security and Privacy Workshops (EuroS PW)},
  title={Anonymous Alone? Measuring Bitcoin’s Second-Generation Anonymization Techniques},
  year={2017},
  volume={},
  number={},
  pages={32-41},
  doi={10.1109/EuroSPW.2017.48}
}

@INPROCEEDINGS{gaihre2018bitcoin,
  author={A. {Gaihre} and Y. {Luo} and H. {Liu}},
  booktitle={2018 IEEE International Conference on Big Data (Big Data)},
  title={Do Bitcoin Users Really Care About Anonymity? An Analysis of the Bitcoin Transaction Graph},
  year={2018},
  pages={1198-1207},
  doi={10.1109/BigData.2018.8622442}
}

@book{boneh2020graduate,
  title={A Graduate Course in Applied Cryptography},
  author={Boneh, Dan and Shoup, Victor},
  journal={Draft 0.5},
  year={2020},
  url={http://cryptobook.us/}
}

@inproceedings{fiat1987prove,
  author={Fiat, Amos and Shamir, Adi},
  editor="Odlyzko, Andrew M.",
  title="How To Prove Yourself: Practical Solutions to Identification and Signature Problems",
  booktitle="Advances in Cryptology --- CRYPTO' 86",
  year="1987",
  publisher="Springer Berlin Heidelberg",
  address="Berlin, Heidelberg",
  pages="186--194",
  doi={10.1007/3-540-47721-7_12},
  isbn="978-3-540-47721-1"
}

@inproceedings{bernhard2012not,
  title="How Not to Prove Yourself: Pitfalls of the Fiat-Shamir Heuristic and Applications to Helios",
  author={Bernhard, David and Pereira, Olivier and Warinschi, Bogdan},
  booktitle="Advances in Cryptology -- ASIACRYPT 2012",
  year="2012",
  publisher="Springer Berlin Heidelberg",
  address="Berlin, Heidelberg",
  pages="626--643",
  abstract="The Fiat-Shamir transformation is the most efficient construction of non-interactive zero-knowledge proofs.",
  isbn="978-3-642-34961-4",
  doi={10.1007/978-3-642-34961-4_38}
}

@article{hamburg2017strobe,
  title={The STROBE protocol framework.},
  author={Hamburg, Mike},
  journal={IACR Cryptol. ePrint Arch.},
  year={2017},
  url={https://eprint.iacr.org/2017/003}
}

@article{attema2020compressed,
  title={Compressed $\Sigma$-Protocol Theory and Practical Application to Plug \& Play Secure Algorithmics.},
  author={Attema, Thomas and Cramer, Ronald},
  journal={IACR Cryptol. ePrint Arch.},
  year={2020},
  url={https://eprint.iacr.org/2020/152}
}

@article{sweeney2002k,
  title = {K-Anonymity: A Model for Protecting Privacy},
  author={Sweeney, Latanya},
  journal={International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems},
  volume={10},
  number={05},
  pages={557--570},
  year = {2002},
issue_date = {October 2002},
publisher = {World Scientific Publishing Co., Inc.},
issn = {0218-4885},
doi = {10.1142/S0218488502001648},
}

@article{tairi2019a2l,
  title={A2L: Anonymous Atomic Locks for Scalability and Interoperability in Payment Channel Hubs.},
  author={Tairi, Erkan and Moreno-Sanchez, Pedro and Maffei, Matteo},
  url={https://eprint.iacr.org/2019/589},
  year={2019}
}

@inproceedings{green2017bolt,
  title = {Bolt: Anonymous Payment Channels for Decentralized Currencies},
  author={Green, Matthew and Miers, Ian},
  booktitle={Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security},
  isbn = {9781450349468},
  publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
  pages={473--489},
  year={2017},
  doi = {10.1145/3133956.3134093}
}


@mastersthesis{nick2015data,
  title={Data-driven de-anonymization in Bitcoin},
  author={Nick, Jonas David},
  year={2015},
  school={ETH-Z{\"u}rich}
}

@inproceedings{brands1993untraceable,
doi={0.1007/3-540-48329-2_26},
author="Brands, Stefan",
editor="Stinson, Douglas R.",
title="Untraceable Off-line Cash in Wallet with Observers",
booktitle="Advances in Cryptology --- CRYPTO' 93",
year="1994",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="302--318",
abstract="Incorporating the property of untraceability of payments into off-line electronic cash systems has turned out to be no easy matter. Two key concepts have been proposed in order to attain the same level of security against double-spending as can be trivially attained in systems with full traceability of payments.",
isbn="978-3-540-48329-8"
}

@book{brands2000rethinking,
  title={Rethinking public key infrastructures and digital certificates: building in privacy},
  author={Brands, Stefan},
  year={2000},
  publisher={Mit Press}
}

@inproceedings{baldimtsi2013anonymous,
author = {Baldimtsi, Foteini and Lysyanskaya, Anna},
title = {Anonymous Credentials Light},
year = {2013},
isbn = {9781450324779},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
doi = {10.1145/2508859.2516687},
booktitle = {Proceedings of the 2013 ACM SIGSAC Conference on Computer \& Communications Security},
pages = {1087–1098},
numpages = {12},
keywords = {attributes, anonymous credentials, lightweight devices, private identity management, blind signatures},
location = {Berlin, Germany},
series = {CCS '13}
}