Bitcoin started with a simple idea: let people send electronic cash directly to each other without relying on a bank.
Privacy formed part of that vision too. Satoshi Nakamoto original white paper described keeping public keys separate from real identities, although every payment amount still remained visible on the blockchain. Researchers at Alloc Init now think Bitcoin could take that privacy much further without changing the Bitcoin consensus rules.
Important to Know
- Shielded Bitcoin aims to hide the sender, receiver and amount of a Bitcoin transfer.
- The proposal would not require a Bitcoin soft fork or separate blockchain.
- Shielded Bitcoin remains a research proposal, not a feature you can use with a normal Bitcoin wallet today.
Bringing Private Digital Cash Back To Bitcoin
Bitcoin gives you control over your money, but ordinary Bitcoin transactions are far from private.
Anyone can inspect transactions on the blockchain. If someone connects one of your Bitcoin addresses to your identity, they may also trace payments, balances and other linked activity. Bitcoin.org itself warns that Bitcoin is not anonymous and that transactions remain publicly stored.
Shielded Bitcoin tries to change that without replacing Bitcoin.
Researchers Clara Shikhelman, Mikhail Komarov and Aleksei Moskvin published the proposal on September 24. Their system borrows ideas from Zcash, a cryptocurrency built around private transactions.
Instead of showing a normal Bitcoin transfer with visible addresses and amounts, Shielded Bitcoin would represent funds using encrypted notes.
A zero knowledge proof, usually shortened to ZK proof, would let you prove that your transaction follows the rules without revealing the private information inside it.
Think of it like proving to a cashier that you have enough money without showing the cashier your bank balance.
The system would also use nullifiers. A nullifier acts like a private receipt showing that a hidden coin has already been spent. That prevents somebody from secretly spending the same bitcoin twice.
No Bitcoin Rule Change Required
One of the more interesting parts involves what Shielded Bitcoin does not require.
Bitcoin miners would not need to understand or enforce the private payment system. Bitcoin would mainly record and order the transaction data.
Separate software called an indexer would read that data, verify the ZK proofs and track which encrypted notes remain spendable. Invalid Shielded Bitcoin transactions could appear on the blockchain, but indexers would simply reject them.
That design means developers would not need a soft fork, which is a backwards compatible change to Bitcoin consensus rules.
For Bitcoin users, avoiding a consensus change matters. Changing Bitcoin base rules normally requires years of technical review and broad agreement across developers, miners, businesses and users.
Shielded Bitcoin instead works as what researchers call a metaprotocol built on top of Bitcoin.
An Old Bitcoin Privacy Idea Gets Another Chance
The connection with Zcash actually goes back years.
Zerocash, the academic project that eventually led to Zcash, originally explored stronger privacy for Bitcoin. Zerocash co-author and StarkWare CEO Eli Ben-Sasson said the original intention was “to bring privacy to Bitcoin.”
Shielded Bitcoin brings that idea back to where it started.
In one respect, it even goes beyond the privacy model in the original Bitcoin white paper. Satoshi proposed hiding the people behind public keys, but transaction amounts and blockchain relationships still remained visible. Shielded Bitcoin aims to hide the payment details themselves.
For anyone who sees Bitcoin primarily as digital cash rather than only digital gold, the idea is easy to understand. Cash does not publish your entire payment history every time you buy something. A stronger privacy layer could make Bitcoin behave more like private peer to peer money again.
Shielded Bitcoin Still Has Problems To Solve
Privacy only works well when enough people use it.
Developer Vadim Zavodil argued that Zcash already has years of activity inside its shielded pool. A new Bitcoin privacy system would initially have a much smaller anonymity set, meaning fewer users whose transactions can blend together.
If only five people use a privacy system, identifying one payment may still be relatively easy. If millions use it in similar ways, tracing one user becomes much harder.
The researchers acknowledge that deposits alone do not guarantee privacy. Distinctive wallet behavior or a small number of large participants could still reveal useful clues to blockchain observers.
Another concern involves quantum computers.
Pierre Luc Dallaire Demers of Pauli Group said the proposed cryptography does not provide quantum resistance. He is exploring whether a future version could use post quantum cryptography if Bitcoin eventually adopts compatible signatures.
There is another unfinished piece. The published specification focuses mainly on private transfers inside the shielded system. Alloc Init plans to explain the full mechanism for moving bitcoin into and out of that system separately, using its Bitcoin PIPEs work.
So you cannot download Shielded Bitcoin and start privately sending BTC today.
Still, the proposal asks an important Bitcoin question: can we keep the security and decentralization of the Bitcoin base layer while giving ordinary users much stronger financial privacy?
For Bitcoin as peer to peer electronic cash, answering that question could bring one of its earliest ambitions back into focus.