სიახლეები

Bitcoin is designed so that everyone can see all the transfers. Previously, this was considered a plus: it is easy to check the issue of coins, monitor their movement and make sure that the rules are followed. But this openness has a disadvantage. If the address is linked to a person or company, a lot becomes clear: how much money they have, who the counterparties are, and when the transactions take place. It suits some people, but it's a threat to others. This problem was noticed by researchers from Alloc Init.

Mikhail Komarov, Alexey Moskvin and Klara Shikhelman came up with the Shielded Bitcoin meta protocol, or "Protected Bitcoin". Their idea does not change the basic bitcoin protocol and does not create a separate blockchain. Bitcoin remains the base layer: it captures and organizes data. Privacy works at the level of an add—on that uses encrypted recordings - they are called notes. The note stores the amount and service data for the owner's access. To an outsider, the contents of the note are hidden.

When transferring money to the bitcoin network, three types of data fall into the network: encrypted notes, nullifiers, and zero-disclosure evidence. A nullifier is a unique number that appears after spending a note so that it cannot be used twice. If someone tries to spend the note again, the network will fail. In this case, the nullifier does not show which note was spent or by whom. Zero-disclosure evidence confirms that the transaction was created according to the rules, but does not disclose the amount or specific notes. The examiner can verify the correctness without receiving unnecessary information.

Indexers, programs that read data from the blockchain, verify evidence, and maintain an up—to-date picture, are responsible for the state of Shielded Bitcoin. Since the rules and data are open, any participant can restore the state of the protocol independently, without one operator. This reduces the risk of abuse and makes the system verifiable.

The authors also paid attention to the keys. There are two types: for conducting transactions and for viewing without the right to spend money. This gives you flexibility — for example, you can give access to the history for auditing without transferring control over the cryptocurrency. This may be important for a business.

Shielded Bitcoin does not make transactions completely invisible. The fact of the transfer, the time, the number of notes, the amount of the commission, and the transaction itself remain visible on the main network. Only the amounts, the identities of the sender and recipient in the protected part, and the specific notes spent are hidden. This is not complete anonymity, but selective privacy: the user may not disclose sensitive details, but the basic parameters remain public.

The main question that the authors have not yet disclosed is how to transfer bitcoins from the main network to Shielded Bitcoin and back. This mechanism is important for any add-on. It depends on how secure and decentralized the system will work. If the bridge turns out to be trustworthy, the benefits of privacy can be offset by the risks of an intermediary. The authors promised to tell about it in the following publications.

As a result, the concept of Shielded Bitcoin looks like an attempt to find a balance between the transparency of bitcoin and the need for privacy. It does not break the existing network, does not require a fork, and offers a detailed cryptographic model. But there is a long way to go from theory to a working system. A lot depends on the solution of the bridge issue, the convenience of indexers, and the willingness of users to deal with the new key model.