Selective Disclosure Credential Sets

Total Page:16

File Type:pdf, Size:1020Kb

Selective Disclosure Credential Sets Selective Disclosure Credential Sets Jason E. Holt ([email protected]) Kent E. Seamons ([email protected]) ¤ Internet Security Research Lab Brigham Young University http://isrl.byu.edu/ Abstract We describe a credential system similar to the electronic cash system described by Chaum, Fiat and Naor. Our system uses bit commitments to create selective disclosure credentials which limit what portions of a credential the holder must reveal. We show how credentials from separate issuers can be linked to the same person in order to prevent users from pooling credentials to obtain services no one user could obtain alone. We also describe how to use a blinding technique described by Laurie which may not violate the patents on blind signatures. Keywords: digital credentials, selective disclosure, credential pooling, blind signatures. 1 Overview signed by the same issuer, and the documents in each column all share a common credential ID which Alice Alice wishes to obtain a service from Steve, a server. will use to prove to Steve that the documents in the Steve will only provide the service if Alice can demon- matrix belong together. To prove that she's honest, strate certain attributes about herself as attested by Alice includes information about certain columns of credential issuing authorities. Alice is willing to prove the matrix and sends the Credential Set Request to these attributes, but doesn't want Steve to get any each of the issuers of her credentials. Each issuer in- additional information about her, even if Steve works spects the request then blindly signs the unrevealed together with the credential issuers. Steve wants to columns of his row in the matrix. Alice then removes make sure that the attributes Alice displays all be- the blinding factors, leaving her with a valid set of long to the same person, and weren't accumulated by credentials (where each row constitutes an individual Alice and Bob pooling their credentials. credential). To this end, Alice ¯rst creates a Credential Set Re- Credentials in credential sets are built from selective- quest, which contains a matrix of blinded documents. disclosure certi¯cates. These are certi¯cates in which Each row of the matrix contains documents to be the normal attribute values have been replaced with a bit commitment of the true value. If Alice doesn't ¤With thanks to Adam Back, Stefan Brands, Ben Lau- choose to reveal the value of a selective disclosure rie, Hilarie Orman, Rich Schroeppel, Robert Sherwood, Mike ¯eld, Steve doesn't learn anything about that value. Stay, Ting Yu, sci.crypt and the Cypherpunks. This research But if she does choose to reveal such a ¯eld, Steve was supported by DARPA through AFRL contract number F33615-01-C-0336 and through Space and Naval Warfare Sys- can verify that she isn't lying about its value. tems Center San Diego grant number N66001-01-18908. 1 When Alice shows some subset of the credentials to server and issuer, and can transfer credentials is- Steve, Steve checks that all the IDs match, ensuring sued under one pseudonym to other pseudonyms they that all the credentials were in fact issued to the same hold. In his system, the exponent used in signing a person. Alice also reveals the preimages of the selec- pseudonym de¯nes the type and value of the creden- tive disclosure attributes in each credential which she tial. His system allows demonstration of mathemat- wishes to show to Steve. ical relationships between attributes (such as AND, OR and GREATER THAN). One awkward require- If Alice later shows credentials from the same set to ment of Chaum's proposal is that a trusted author- someone else, that person could collude with Steve ity is needed to facilitate the relationship between and determine that they both were dealing with issuers, users and servers. A particular server and is- the same person. Thus for maximum privacy Alice suer would have to establish a relationship with this should obtain many instances of her credential set, authority before users could even obtain credentials and use each instance in only one transaction. from the issuer to show to the server. Revocable anonynimity can optionally be obtained Brands[1, 2] presented a system with a raft of fea- by including a uniquely identifying document in the tures. His book describes how to use his credentials certi¯cate which can only be decrypted by the coop- to satisfy boolean expressions as in Chaum's system, eration of a quorum of auditing authorities. discourage lending of credentials, limit the number of times a credential may be shown, renew creden- tial certi¯cation anonymously, implement revocable 2 Related work anonymity, etc. Pages 193 and 210 describe a feature of his credentials which might allow an implementa- tion of pooling prevention as we describe. Brands Several types of credential schemes have been de- obtained several patents on his system. scribed in the literature. Some of them are, like our system, designed as equivalents to traditional creden- Camenisch and Lysyanskaya[3] proposed a system al- tials like driver's licences. Some are designed to al- lowing a credential to be shown multiple times with- low users to develop digital pseudonyms online, while out allowing showing instances to be linked. Their many others are aimed at providing the digital equiv- system focuses on limiting the information revealed alent of cash. to servers during the showing protocol rather than restricting what information the issuer gets during In 1988, Chaum, Fiat and Naor[5] developed a digital the signing process. Revocable anonymity is possi- cash system which uses blind signatures and the cut ble along with several other desirable features. Their and choose protocol in almost exactly the way our system provides many of the features of previous sys- system does, and de¯nes a matrix of values almost tems without using blinding a la Chaum, but relies identical to the certi¯cate matrix described in section heavily on proofs of knowledge like Brands' system. 4.1. Our credential sets could be considered a vari- Credentials are issued to a user relative to their pub- ant of their system accomodating selective disclosure lic key, so their system could also be used to prevent credentials, associating them with a single identity, users from pooling credentials. and optionally using a di®erent blinding technique. Chaum's blind signature techniques[7, 8] made it pos- sible to obtain a certi¯ed value from an issuer and show it to a server without the possibility of the 3 Preliminaries server and issuer correlating the issuing and show- ing events. In 1985, Chaum presented a credential This section establishes the primitives necessary to system based on blind signatures[6] in which users implement our system. Blind signatures and cut and establish a di®erent pseudonym with each potential choose are well known techniques. Laurie's blinding 2 technique and the form of selective disclosure cre- to do this is with the help of collision-resistant one- dentials presented here are relatively obscure, while way functions. Alice's commitment c is the output of noninteractive cut and choose is completely new, as a one-way function oneway() operating on her secret far as the authors are aware. value s and a random string r: 3.1 Credentials and Certi¯cates c = commit(s) = oneway(s : r) Our de¯nition of a certi¯cate is a document contain- (: denotes concatenation). Alice ¯rst sends c to Vic- ing various attributes and their values. Certi¯cates tor the veri¯er. If she chooses not to reveal the value, are issued by issuers (often called certi¯cate author- Victor can't determine what the value was. If she ities) to users (often called subjects). X.509v3 cer- does choose to reveal her secret, she sends Victor s ti¯cates have a number of standard ¯elds such as the and r, who runs them through oneway() and checks issuer and subject names, and \extensions" which can that the result equals c. If oneway() is collision- specify arbitrary other kinds of information about the resistant, Alice can't easily ¯nd any other values for user. s and r which will produce c as output. Brands[2] A user typically creates a certi¯cate to be signed, mentions this technique on pages 27 and 184 of his called a certi¯cate request, and sends it to the issuer. book. The issuer signs the request by hashing the document A normal certi¯cate can easily be made into a se- with a collision-resistant one-way function and sign- lective disclosure certi¯cate by replacing actual at- ing the hash with his private key. Later the user can tribute values with commitments to those values. show the signed certi¯cate to a veri¯er, who veri¯es Victor can verify that the certi¯cate is valid in the that the certi¯cate is valid. In an \on-line" system, usual way, but gains no information about the selec- this veri¯cation takes place with the help of a cen- tive disclosure values unless Alice reveals the value tral authority. In an \o®-line" system, the server can and random string used in the commitment function. verify a certi¯cate (or more generally, a credential) Selective disclosure credentials are even more power- without outside help. ful when used in conjunction with blind signatures. We use the term \credential" when we wish to speak If Izzy (a credential issuer) blindly signs a creden- of attribute demonstrating information in general. A tial for Alice, she can show it to Steve (a server who credential is something which establishes one or more provides a service after verifying a credential) with- attributes of its owner.
Recommended publications
  • A Technical Overview of Digital Credentials
    A Technical Overview of Digital Credentials Dr. Stefan Brands Credentica [email protected] February 20, 2002 Abstract Applications that involve the electronic transfer of credentials, value tokens, profiles, and other sensitive information are quickly gaining momentum. Traditional attempts to introduce electronic authentication, such as PKI and biometric verification, expose organizations to po- tentially unlimited liability, lead to consumer fear, and stifle the adoption of new systems. To overcome these barriers, innovative solutions are needed that address the entire spectrum of security and privacy interests for all parties involved. This paper is a technical overview of Digital Credentials. Digital Credentials are the digital equivalent of paper documents, plastic tokens, and other tangible objects issued by trusted parties. At the same time, they are much more powerful than their physical counterparts. For example, individuals can selectively disclose properties of the data fields in their Digital Credentials while hiding any other information. Digital Credentials also provide much greater security. As a result, they can be used to securely implement objects that traditionally are made identifiable in order to deal with certain kinds of fraud. Examples are diplomas, work permits, access cards, and drivers’ licenses. 1 Introduction Around the world, influential organizations are rushing to provide individuals with digital identity certificates that will be the sole means of participating in their systems. Among the front-runners are telecommunication organizations, health care providers, mobile service providers, financial institutions, and state and federal governments. A digital identity certificate is just a sequence of zeros and ones, and so it can be transferred electronically and can be verified with 100 percent accuracy by computers.
    [Show full text]
  • Crush Crypto Educational Series
    The History of Digital Currency Educational Series November 26, 2018 Digital Currency Before Bitcoin • The creation of Bitcoin in 2009 marked the birth of the first digital currency to achieve widespread adoption across the globe. However, the concept of a secure digital currency has been around since the 1980s. • Previous attempts that inspired Satoshi Nakamoto’s creation of Bitcoin include: • DigiCash • Bit Gold • Hashcash • B-money For additional resources, please visit www.CrushCrypto.com. 2 Copyright © Crush Crypto. All Rights Reserved. DigiCash • Computer scientist David Chaum released the paper Blind Signatures for Untraceable Payments (1982) in which he outlined an alternative to the electronic transactions hitting retail stores at the time. His paper is considered one of the first proposals of digital currency in history. • He continued working on his proposal and eventually launched a company called DigiCash in 1990 to commercialize the ideas in his research. In 1994 the company put forth their first electronic cash transaction over the internet. For additional resources, please visit www.CrushCrypto.com. 3 Copyright © Crush Crypto. All Rights Reserved. DigiCash (continued) • DigiCash transactions were unique for the time considering their use of protocols like blind signatures and public key cryptography to enable anonymity. As a result, third parties were prevented from accessing personal information through the online transactions. • Despite the novel technology, DigiCash was not profitable as a company and filed a chapter 11 bankruptcy in 1998 before being sold for assets in 2002. • Chaum thought that DigiCash entered the market before e-commerce was fully integrated with the internet and that lead to a chicken-and-egg problem.
    [Show full text]
  • Achieving Electronic Privacy a Cryptographicinvention Known As a Blind Signature Permits Numbers to Serve As Electronic Cash Or to Replace Conventional Identification
    Achieving Electronic Privacy A cryptographic invention known as a blind signature permits numbers to serve as electronic cash or to replace conventional identification. The author hopes it may return control of personal information to the individual by David Chaum very time you make a telephone murderers have tracked down their tar­ cessors capable of carrying out the nec­ call, purchase goods using a cred­ gets by consulting government-main­ essary algorithms have already been it card, subscribe to a magazine tained address records. On another lev­ embedded in pocket computers the size or pay your taxes, that information goes el, the U.S. Internal Revenue Service has and thickness of a credit card. Such sys­ intoE a data base somewhere. Further­ attempted to single out taxpayers for tems have been tested on a small scale more, all these records can be linked audits based on estimates of house­ and could be in widespread use by the so that they constitute in effect a sin­ hold income compiled by mailing-list middle of this decade. gle dossier on your life-not only your companies. medical and financial history but also The growing amounts of information he starting point for this ap­ what you buy, where you travel and that different organizations collect proach is the digital Signature, whom you communicate with. It is al­ about a person can be linked because first proposed in 1976 by Whit­ most impossible to learn the full extent all of them use the same key-in the field Diffie, then at Stanford University. of the files that various organizations U.S.
    [Show full text]
  • HOW to REALLY CIRCULATE ELECTRONIC CASH on the INTERNET by Katsuhito Iwai
    HOW TO REALLY CIRCULATE ELECTRONIC CASH ON THE INTERNET by Katsuhito Iwai Professor of Economics, The University of Tokyo 7-3-1 Hongo, Bunkyo-ku, Tokyo, Japan 113 [email protected] or [email protected] August 28, 1995 (Japanese version: March 30, 1995) 1. An introductory remark The recent world-wide explosion of the Internet community has encouraged many individuals and groups to propose a variety of electronic payment systems that can be used safely and efficiently for the economic transactions on computer networks. Some proposals are mere variations on the traditional credit card system. But the more ambitious ones are aiming at an electronic cash system which turns an electronic stream of numbers, the only "thing" moving on lines, into 'electronic cash', or 'e-cash', that can be spent directly on on-line commercial wares. One such attempt is the DigiCash system of David Chaum.1 Since any message transmitted through the Internet is accessible to anyone who cares to look, and since any copied number is as good a number as the original one, the basic problem is to devise a copy-proof and cheat-proof transmission procedure among computer users. The DigiCash system has solved this by adopting the public-key cryptography for digital signatures that can secure the privacy of communicated messages as well as the authenticity of their communicators. It has also incorporated a device of blind signatures which assures the complete anonymity of its users. The DigiCash system (and other schemes based on similar principles) perhaps comes closest to the ideal of e-cash.
    [Show full text]
  • Single Term Off-Line Coins
    Single Term Off-Line Coins Niels Ferguson CWI, P.O. Box 94079, 1090 GB Amsterdam, Netherlands. e-mail: nielsacwi .nl Abstract. We present a new construction for off-line electronic coins that is both far more efficient and much simpler than pre- vious systems. Instead of using many terms, each for a single bit of the challenge, our system uses a single term for a large number of possible challenges. The withdrawal protocol does not use a cut- and-choose methodology as with earlier systems, but uses a direct construction. 1 Introduction The main requirements for an electronic cash system are the following: - Security. Every party in the electronic cash system should be protected from a collusion of all other parties (multi-party security). - Off-line. There should be no need for communication with a central authority during payment. - Fake Privacy. The bank and all the shops should together not be able to derive any knowledge from their protocol transcripts about where a user spends her money. - Privacy (untraceable). The bank should not be able to determine whether two payments were made by the same payer, even if all shops cooperate. The privacy requirement is obviously stronger then the fake privacy one. Under real-world circumstances, a payer is identified during some of the payments by means outside the electronic cash system. If two payments can be recognised as originating from the same payer, then knowing the identity of the payer during a single payment anywhere allows the tracing of all other payments made by that payer. Therefore, fake privacy provides no privacy at all in practice.
    [Show full text]
  • Desperately Seeking Satoshi; from Nowhere, Bitcoin Is Now Worth Billions
    Title: Desperately seeking Satoshi; From nowhere, bitcoin is now worth billions. Where did it come from? Andrew Smithset off to find Satoshi Nakamoto, the mysterious genius behind the hit e-currency Source: Sunday Times (London, England). (Mar. 2, 2014): News: p16. Document Type: Article Copyright : COPYRIGHT 2014 NI Syndication Limited. Sunday Times http://www.sunday-times.co.uk Full Text: it's late 2013; a converted brewery in hip east London, with bare-brick walls and double-espresso musk. For days, online forums have churned with plans for this unlikely 800-strong agglomeration of trend- seekers, geeks and the merely curious to converge from all corners of Britain, and they look a little shocked to be here, as if the focus of their shared fervour only now seems real. The focus is bitcoin, the bizarre electronic "cryptocurrency" that appeared out of nowhere at the start of 2009 and slowly, strangely, began to attract followers. With no clear reason to be worth anything, it was traded for pennies at the end of the first year, but after two years had achieved dollar parity, then more and as the price began to levitate, extraordinary things happened around it, with exchanges and odd frontier-style businesses grown, robbed, scammed as if in some free-market libertarian fantasy. Vexed economists cried "Bubble!" and predicted the end more loudly with each turn of bad news, after which bitcoin's value would crash, then simply continue its rise, until by the end of 2013 a single "coin" would cost you $1,000. Some investors predicted it would eventually reach $1m; others that it would be spam by the end of this year.
    [Show full text]
  • E-Cash Payment Protocols and Systems
    E-CASH PAYMENT PROTOCOLS AND SYSTEMS * MRS. J. NIMALA, Assistant Professor, PG and Research Department of Commerce with CA, Hindusthan College of Arts and Science, Coimbatore. TN INDIA ** MRS. N. MENAGA, Assistant Professor, PG and Research Department of Commerce with CA, Hindusthan College of Arts and Science, Coimbatore. TN INDIA Abstract E-cash is a payment system intended and implemented for making purchases over open networks such as the Internet. Require of a payment system which provides the electronic transactions are emergent at the similar moment that the exploit of Internet is budding in our daily life. Present days electronic payment systems have a major dilemma, they cannot switch the security and the user’s secrecy and at the same time these systems are secure on the cost of their users ambiguity. This paper shows the payment protocols for digital cash and discusses how a digital cash system can be fashioned by presenting a few of the recent day’s digital cash systems in details. We also offer a comparison and determine them mutually to see which one of them fulfils the properties for digital cash and the mandatory security level. Keywords: E-cash; Payment Protocol; Double Spending; Blind Signature. Introduction DigiCash is a private company founded in 1989 by Dr David Chaum. It has created an Internet money product, now patented, and called ‘ecash’. DigiCash’s ecash has been used for many different types of transactions. It is a stored-value cryptographic coin system that facilitates Internet-based commerce using software that runs on personal computers. It provides a way to implement anonymous electronic payments in an environment of mutual mistrust between the bank and the system users.
    [Show full text]
  • Blockchain > Cryptocurrency > Digital
    > Blockchain > Cryptocurrency > Digital Transformation > Internet of Things JANUARY 2020 www.computer.org Keep Your Career Options Open Upload Your Resume Today! Whether your enjoy your current position or you are ready for change, the IEEE Computer Society Jobs Board is a valuable resource tool. Take advantage of these special resources for job seekers: JOB ALERTS TEMPLATES CAREER RESUMES VIEWED ADVICE BY TOP EMPLOYERS No matter your career WEBINARS level, the IEEE Computer Society Jobs Board keeps you connected to workplace trends and exciting new career prospects. www.computer.org/jobs IEEE COMPUTER SOCIETY computer.org • +1 714 821 8380 STAFF Editor Publications Portfolio Managers Cathy Martin Carrie Clark, Kimberly Sperka Publications Operations Project Specialist Publisher Christine Anthony Robin Baldwin Production & Design Senior Advertising Coordinator Carmen Flores-Garvey Debbie Sims Circulation: ComputingEdge (ISSN 2469-7087) is published monthly by the IEEE Computer Society. IEEE Headquarters, Three Park Avenue, 17th Floor, New York, NY 10016-5997; IEEE Computer Society Publications Office, 10662 Los Vaqueros Circle, Los Alamitos, CA 90720; voice +1 714 821 8380; fax +1 714 821 4010; IEEE Computer Society Headquarters, 2001 L Street NW, Suite 700, Washington, DC 20036. Postmaster: Send address changes to ComputingEdge-IEEE Membership Processing Dept., 445 Hoes Lane, Piscataway, NJ 08855. Periodicals Postage Paid at New York, New York, and at additional mailing offices. Printed in USA. Editorial: Unless otherwise stated, bylined articles, as well as product and service descriptions, reflect the author’s or firm’s opinion. Inclusion in ComputingEdge does not necessarily constitute endorsement by the IEEE or the Computer Society. All submissions are subject to editing for style, clarity, and space.
    [Show full text]
  • Formal Analysis of E-Cash Protocols∗
    Formal Analysis of E-Cash Protocols∗ Jannik Dreier1, Ali Kassem2 Pascal Lafourcade3 1Institute of Information Security, Department of Computer Science, ETH Zurich, Switzerland 2 University Grenoble Alpes, VERIMAG, Grenoble, France 3University Clermont Auvergne, LIMOS, France Keywords: E-Cash, Formal Analysis, Double Spending, Exculpability, Privacy, Applied π-Calculus, ProVerif. Abstract: Electronic cash (e-cash) aims at achieving client privacy at payment, similar to real cash. Several security protocols have been proposed to ensure privacy in e-cash, as well as the necessary unforgery properties. In this paper, we propose a formal framework to define, analyze, and verify security properties of e-cash systems. To this end, we model e-cash systems in the applied π-calculus, and we define two client privacy properties and three properties to prevent forgery. Finally, we apply our definitions to an e-cash protocol from the literature proposed by Chaum et al., which has two variants and a real implementation based on it. Using ProVerif, we demonstrate that our framework is suitable for an automated analysis of this protocol. 1 Introduction In this protocol coins are non-transferable, i.e., the seller cannot spend a received coin again, but Although current banking and electronic pay- has to deposit it at the bank. If he wants to ment systems such as credit cards or, e.g., Pay- spend a coin in another shop, he has to withdraw Pal allow clients to transfer money around the a new coin from his account, similar to the usual world in a fraction of a second, they do not fully payment using cheques.
    [Show full text]
  • R a I L Artificial Intelligence & Law
    Volume 3, No. 6 | November–December 2020 The Journal of Robotics, R A I L Artificial Intelligence & Law Editor’s Note: Change Steven A. Meyerowitz Demystifying Blockchain and Cryptocurrencies David Kalat 5G Is Unleashing the Fourth Industrial Revolution—Here’s What It Means for Legal Systems Louis Lehot and Ethan Floyd Accelerating Change: From Smart City to Smart Society Oliver Brettle, Nicholas Greenacre, Tim Hickman, Andres Liivak, Daren Orzechowski, and Adam Pierson Mobility and Transportation Technology Review Ariel S. Wolf Is the Use of Open Source Software Putting Your Business at Risk? Samuel T. Tibbetts and Stuart James FTC Provides Guidance on Use of AI and Algorithms Terrell McSweeny, Lee J. Tiedrich, and Jadzia Pierce Everything Is Not Terminator: Defining AI in Contracts John Frank Weaver ® FULL COURT PRESS The Journal of Robotics, Artificial Intelligence & Law RAIL Volume 3, No. 6 | November–December 2020 373 Editor’s Note: Change Steven A. Meyerowitz 377 Demystifying Blockchain and Cryptocurrencies David Kalat 397 5G Is Unleashing the Fourth Industrial Revolution—Here’s What It Means for Legal Systems Louis Lehot and Ethan Floyd 407 Accelerating Change: From Smart City to Smart Society Oliver Brettle, Nicholas Greenacre, Tim Hickman, Andres Liivak, Daren Orzechowski, and Adam Pierson 415 Mobility and Transportation Technology Review Ariel S. Wolf 423 Is the Use of Open Source Software Putting Your Business at Risk? Samuel T. Tibbetts and Stuart James 431 FTC Provides Guidance on Use of AI and Algorithms Terrell McSweeny, Lee J. Tiedrich, and Jadzia Pierce 435 Everything Is Not Terminator: Defining AI in Contracts John Frank Weaver EDITOR-IN-CHIEF Steven A.
    [Show full text]
  • Cypherpunk Manifesto
    Cypherpunk Manifesto Murat Osmanoglu Cypherpunk Manifesto Cypherpunk Manifesto • ‘cypherpunk’ created from the words ‘cipher’ (or cypher) and ‘cyberpunk’ Cypherpunk Manifesto • ‘cypherpunk’ created from the words ‘cipher’ (or cypher) and ‘cyberpunk’ (a genre of science fiction set in a lawless subculture of an oppressive society dominated by computer technology) Cypherpunk Manifesto • ‘cypherpunk’ created from the words ‘cipher’ (or cypher) and ‘cyberpunk’ (a genre of science fiction set in a lawless subculture of an oppressive society dominated by computer technology) • an activist promoting wide use of strong crypto and privacy- enhancing technologies as a route to social and political change. Cypherpunk Manifesto • ‘cypherpunk’ created from the words ‘cipher’ (or cypher) and ‘cyberpunk’ (a genre of science fiction set in a lawless subculture of an oppressive society dominated by computer technology) • an activist promoting wide use of strong crypto and privacy- enhancing technologies as a route to social and political change. • its roots traced back to the study of David Chaum on anonymous digital cash and pseudonymous reputation systems Cypherpunk Manifesto • ‘cypherpunk’ created from the words ‘cipher’ (or cypher) and ‘cyberpunk’ (a genre of science fiction set in a lawless subculture of an oppressive society dominated by computer technology) • an activist promoting wide use of strong crypto and privacy- enhancing technologies as a route to social and political change. • its roots traced back to the study of David Chaum on anonymous digital cash and pseudonymous reputation systems ‘Security without Identification : Transaction Systems to Make Big Brother Obsolete’, 1985 Cypherpunk Manifesto • ‘cypherpunk’ created from the words ‘cipher’ (or cypher) and ‘cyberpunk’ (a genre of science fiction set in a lawless subculture of an oppressive society dominated by computer technology) • an activist promoting wide use of strong crypto and privacy- enhancing technologies as a route to social and political change.
    [Show full text]
  • “History and Evolution of the Main Cryptocurrencies”
    Department of Management Subject: International Economics and Industrial Dynamics “History and evolution of the main cryptocurrencies” Relator: Candidate: Prof. Luigi Marengo Vincenzo D’Andrea Correlator: ID number: Prof. Gianfranco Di Vaio 680091 ACCADEMIC YEAR 2017/2018 1 Index a. Introduction ............................................................................................................................. 4 1. Bitcoin ..................................................................................................................................... 6 1.1 What is a Bitcoin (BTC) ......................................................................................... 6 1.2 Main characteristics and differences with legal currencies .................................... 8 1.3 Where to store Bitcoin, how to get and where to use it ........................................ 10 1.3.1 Bitcoin Wallets ...................................................................................... 10 1.3.2 How to get BTC ..................................................................................... 14 1.3.3 Where to use BTC ................................................................................ 19 1.4 History and Altcoins ............................................................................................. 20 1.4.1 History ................................................................................................... 21 1.4.2 Altcoins .................................................................................................
    [Show full text]