Cited by 983Cryptography and Data SecurityBlockchain Technology Applications and SecurityInternet Traffic Analysis and Secure E-voting

Zerocoin: Anonymous Distributed E-Cash from Bitcoin

Open access
Miers, I., Garman, C., Green, M., Rubin, A. D.·2013·2013 IEEE Symposium on Security and Privacy

Abstract

Bitcoin is the first e-cash system to see widespread adoption. While Bitcoin offers the potential for new types of financial interaction, it has significant limitations regarding privacy. Specifically, because the Bitcoin transaction log is completely public, users' privacy is protected only through the use of pseudonyms. In this paper we propose Zerocoin, a cryptographic extension to Bitcoin that augments the protocol to allow for fully anonymous currency transactions. Our system uses standard cryptographic assumptions and does not introduce new trusted parties or otherwise change the security model of Bitcoin. We detail Zerocoin's cryptographic construction, its integration into Bitcoin, and examine its performance both in terms of computation and impact on the Bitcoin protocol.

Integrity signals

Registry

Crossref · 10.1109/sp.2013.34

Cites

33 of 33 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Mixing protocols such as CoinJoin, Ring Signature blockchains like Monero, and Zero-Knowledge blockchains like Zerocoin all hinder the token's history, making the owner's addresses uncorrelatable by hiding them in a set of possible owners.

    “Mixing protocols such as CoinJoin [70], Ring Signature blockchains like Monero [72] and Zero-Knowledge blockchains like Zerocoin [16], all hinder the token's history, making the owner's addresses uncorrelatable by hiding them in a set of possible owners.”
  • P-ABC implementations such as IBM's Identity Mixer and Microsoft's U-Prove have not had the expected adoption rate.

    “Implementations such as IBM's Identity Mixer [21], [22] or Microsoft's U-Prove [23] have not had the expected adoption rate.”

Cites

Flagged first, then by citations

3 of the 36 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
Miers, I., Garman, C., Green, M., & Rubin, A. D.
Affiliations
Johns Hopkins University (US)
Venue
2013 IEEE Symposium on Security and Privacy
Publisher
IEEE
Published
2013-05
Pages
397-411
ISSN
1081-6011 (ISSN-L)
OpenAlex
W2013686672
Cited by
983
References
36
Citations by year
2026: 27 · 2025: 61 · 2024: 71 · 2023: 63 · 2022: 88 · 2021: 114 · 2020: 124 · 2019: 107 · 2018: 91 · 2017: 64 · 2016: 57 · 2015: 55 · 2014: 43 · 2013: 17
FWCI
37.03
Type
conference paper
Language
en
Open access
Locations
IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
Funders
  • Defense Advanced Research Projects Agency (FA8750, FA8750-11-2-0211)
  • Office of Naval Research (N00014)
  • Air Force Research Laboratory (FA8750-11-2- 0211.)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
  • Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
Keywords
Bitcoin, e-cash, anonymity, privacy, cryptocurrency, cryptographic constructions, pseudonyms, transaction logs

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review