Bitcoin and beyond: A technical survey on decentralized digital currencies

IEEE Communications Surveys and Tutorials

Volumn 18, Issue 3, 2016, Pages 2084-2123

  Tschorsch, Florian ^a   Scheuermann, Björn ^a  

^a HUMBOLDT UNIVERSITY   (Germany)

Author keywords

Altcoins; Bitcoin; blockchain; cryptocurrencies; digital currencies; distributed consensus; survey; tutorial

Indexed keywords

ECONOMICS; SURVEYING; SURVEYS;

ALTCOINS; BITCOIN; BLOCK-CHAIN; DISTRIBUTED CONSENSUS; TUTORIAL;

ELECTRONIC MONEY;

EID: 84985991912     PISSN: None     EISSN: 1553877X     Source Type: Journal    
DOI: 10.1109/COMST.2016.2535718     Document Type: Article

References (245)

1. D. Chaum, "Untraceable electronic mail, return addresses, and digital pseudonyms, " Commun. ACM, vol. 24, no. 2, pp. 211-219, Feb. 1981.
2. P. R. Zimmermann, The Official PGP User's Guide. Cambridge, MA, USA: MIT Press, 1995.
3. A. Back,"Hashcash-A denial of service counter-measure," Tech. Rep., Aug. 2002 [Online]. Available: http://www.hashcash.org/papers/hashcash.pdf
4. B. Cohen,"Incentives build robustness in BitTorrent," in Proc. 1st Workshop Econ. Peer Peer Syst. (P2PEcon-03), Jun. 2003, pp. 68-72.
5. D. Chaum,"Blind signatures for untraceable payments," in Proc. 2nd Conf. Adv. Cryptol., Aug. 1982, pp. 199-203.
6. L. Law, S. Sabett, and J. Solinas,"How to make a mint: The cryptography of anonymous electronic cash," Amer. Univ. Law Rev., vol. 46, no. 4, 1996.
7. W. Dai. (1998). B-Money [Online]. Available: http://www.weidai.com/bmoney.txt
8. V. Vishnumurthy, S. Chandrakumar, and E. G. Sirer,"KARMA: A secure economic framework for peer-to-peer resource sharing," in Proc. 1st Workshop Econ. Peer Peer Syst. (P2PEcon-03), Jun. 2003.
9. H. Finney. (2004). Rpow [Online]. Available: http://cryptome.org/rpow.htm
10. N. Szabo. (2005). Bit Gold [Online]. Available: http://unenumerated. blogspot.de/2005/12/bit-gold.html
11. L. Lamport, R. Shostak, and M. Pease,"The Byzantine generals problem," ACM Trans. Program. Lang. Syst., vol. 4, no. 3, pp. 382-401, 1982.
12. N. Szabo,"Advances in distributed security," 2003 [Online]. Available: http://szabo.best.vwh.net/distributed.html
13. N. Szabo,"Secure property titles with owner authority," 1998 [Online]. Available: http://nakamotoinstitute.org/secure-property-titles/
14. D. Malkhi and M. Reiter,"Byzantine quorum systems," Distrib. Comput., vol. 11, no. 4, pp. 203-213, 1998.
15. J. Douceur,"The Sybil attack," in Proc. 1st Int. Workshop Peer Peer Syst., Mar. 2002, pp. 251-260.
16. S. Nakamoto,"Bitcoin: A peer-to-peer electronic cash system," Tech. Rep., 2008 [Online]. Available: https://bitcoin.org/bitcoin.pdf.
17. S. Nakamoto. (2008, Nov.). Bitcoin P2P e-Cash Paper [Online]. Available: https://www.mail-archive.com/cryptography@metzdowd. com/msg09959.html
18. R. C. Merkle,"A digital signature based on a conventional encryption function," in Proc. 7th Conf. Adv. Cryptol. (CRYPTO-87), Aug. 1987, pp. 369-378.
19. S. Haber and W. S. Stornetta,"How to time-stamp a digital document," J. Cryptol., vol. 3, pp. 99-111, 1991.
20. H. Massias, X. S. Avila, and J.-J. Quisquater,"Design of a secure timestamping service with minimal trust requirement," in Proc. 20th Symp. Inf. Theory Benelux (SITB-99), May 1999.
21. S. Barber, X. Boyen, E. Shi, and E. Uzun,"Bitter to better-How to make bitcoin a better currency," in Proc. 16th Int. Conf. Financial Cryptogr. Data Secur. (FC-12), Mar. 2012, pp. 399-414.
22. D. Drainville,"An analysis of the bitcoin electronic cash system," Univ. Waterloo, Waterloo, ON, Canada, Canada, Tech. Rep., Dec. 2012.
23. J. Bonneau, A. Miller, J. Clark, A. Narayanan, J. A. Kroll, and E. W. Felten,"SoK: Research perspectives and challenges for bitcoin and cryptocurrencies," in Proc. 36th IEEE Symp. Secur. Privacy (SP-15), May 2015, pp. 104-121.
24. F. Tschorsch and B. Scheuermann,"Bitcoin and beyond: A technical survey on decentralized digital currencies," IACR Cryptology ePrint Archive, Tech. Rep. 2015/464, 2015.
25. (2014). Bitcoin Developer Documentation [Online]. Available: https://bitcoin.org/en/developer-documentation
26. (2014). The Bitcoin Wiki [Online]. Available: https://en.bitcoin.it/wiki
27. M. Nielsen. (2013, Dec.). How the Bitcoin Protocol Actually Works [Online]. Available: http://www.michaelnielsen.org/ddi/how-thebitcoin-protocol-actually-works/
28. A. Narayanan, J. Bonneau, E. Felten, and A. Miller. (2015). Bitcoin and Cryptocurrency Technologies [Online]. Available: https://www.coursera.org/course/bitcointech
29. N. Asokan, P. A. Janson, M. Steiner, and M. Waidner,"The state of the art in electronic payment systems," IEEE Comput., vol. 30, no. 9, pp. 28-35, Sep. 1997.
30. D. Eastlake III and T. Hansen. (2011, May). US Secure Hash Algorithms (SHA and SHA-Based HMAC and HKDF), RFC 6234 (Informational), Internet Engineering Task Force [Online]. Available: http://www.ietf.org/rfc/rfc6234.txt
31. D. Kraft,"Difficulty control for blockchain-based consensus systems," Peer Peer Netw. Appl., 2015.
32. K. Kaskaloglu,"Near zero bitcoin transaction fees cannot last forever," in Proc. Int. Conf. Digit. Secur. Forensics, Jun. 2014, pp. 91-99.
33. J. W. Bos, J. A. Halderman, N. Heninger, J. Moore, M. Naehrig, and E. Wustrow,"Elliptic curve cryptography in practice," in Proc. 18th Int. Conf. Financial Cryptogr. Data Secur. (FC-14), Mar. 2014, pp. 157-175.
34. D. Ron and A. Shamir,"Quantitative analysis of the full bitcoin transaction graph," in Proc. 17th Int. Conf. Financial Cryptogr. Data Secur. (FC-13), Apr. 2013, pp. 6-24.
35. M. Fleder, M. Kester, and S. Pillai,"Bitcoin transaction graph analysis," Massachusetts Institute of Technology (MIT), Computer Systems Security, Tech. Rep. 6.858, 2013.
36. G. Andresen,"BIP 16: Pay to script hash," Jan. 2012 [Online]. Available: https://github.com/bitcoin/bips/blob/master/bip-0016.mediawiki
37. G. Andresen,"BIP 13: Address format for pay-to-script-hash," Oct. 2011.
38. I. Gerhardt and T. Hanke,"Homomorphic payment addresses and the pay-to-contract protocol," Computing Research Repository, Tech. Rep. abs/1212.3257, 2012.
39. G. Andresen,"BIP 11: M-of-N standard transactions," Oct. 2011.
40. J. Clark and A. Essex,"CommitCoin: Carbon dating commitments with bitcoin," in Proc. 16th Int. Conf. Financial Cryptogr. Data Secur. (FC-12), Mar. 2012, pp. 390-398.
41. G. Maxwell. (2013, Oct.). CoinSwap: Transaction Graph Disjoint Trustless Trading [Online]. Available: https://bitcointalk.org/index.php? topic=321228.0
42. C. Decker and R. Wattenhofer,"A fast and scalable payment network with bitcoin duplex micropayment channels," in Proc. 17th Int. Symp. Stabilization Safety Secur. Distrib. Syst., Aug. 2015, pp. 3-18.
43. J. R. Willett,"The second bitcoin," White Paper, Tech. Rep., 2013 [Online]. Available: https://sites.google.com/site/2ndbtcwpaper/2ndBitcoinWhitepaper.pdf
44. G. Wood,"ETHEREUM: A secure decentralised generalised transaction ledger," Tech. Rep., 2014 [Online]. Available: http://gavwood.com/Paper.pdf
45. E. Project,"A next-generation smart contract and decentralized application platform," 2014 [Online]. Available: https://github.com/ethereum/wiki/wiki/White-Paper
46. N. Szabo,"The idea of smart contracts," 1997.
47. M. Rosenfeld,"Overview of colored coins," Tech. Rep., 2012 [Online]. Available: https://bitcoil.co.il/BitcoinX.pdf
48. A. Yelowitz and M. Wilson,"Characteristics of bitcoin users: An analysis of Google search data," Appl. Econ. Lett., vol. 22, no. 13, 2015.
49. J. Bohr andM. Bashir,"Who uses bitcoin? An exploration of the bitcoin community," in Proc. 12th IEEE Conf. Privacy Secur. Trust (PST-14), Jul. 2014, pp. 94-101.
50. M. Matta, I. Lunesu, and M. Marchesi,"Bitcoin spread prediction using social and web search media," in Proc. Workshop Deep Content Anal. Techn. Pers. Intell. Serv. (DeCAT-15), Jun. 2015.
51. L. Kristoufek,"What are the main drivers of the bitcoin price? Evidence from wavelet coherence analysis," PLoS ONE, vol. 10, no. 4, Apr. 2015.
52. D. Garcia, C. J. Tessone, P. Mavrodiev, and N. Perony,"The digital traces of bubbles: Feedback cycles between socio-economic signals in the bitcoin economy," Computing Research Repository, Tech. Rep. abs/1408.1494, 2014.
53. D. Shah and K. Zhang,"Bayesian regression and bitcoin," Computing Research Repository, Tech. Rep. abs/1410.1231, 2014.
54. S. Goldfeder, J. Bonneau, E. W. Felten, J. A. Kroll, and A. Narayanan,"Securing bitcoin wallets via threshold signatures," Tech. Rep., 2014 [Online]. Available: http://www.cs.princeton.edu/stevenag/bitcoin- threshold-signatures.pdf.
55. T. Bamert, C. Decker, R. Wattenhofer, and S. Welten,"Bluewallet: The secure bitcoin wallet," in Proc. 10th Int.Workshop Secur. TrustManage., Sep. 2014, pp. 65-80.
56. N. Howgrave-Graham and N. P. Smart,"Lattice attacks on digital signature schemes," Des. Codes Cryptogr., vol. 23, no. 3, pp. 283-290, 2001.
57. A. Miller and J. J. LaViola, Jr.,"Anonymous Byzantine consensus from moderately-hard puzzles: A model for bitcoin," Computer Science, Univ. Florida, Gainesville, FL, USA, Tech. Rep., Apr. 2014 [Online]. Available: http://tr.eecs.ucf.edu/id/eprint/78
58. M. Rosenfeld,"Analysis of hashrate-based double spending," Tech. Rep., 2012 [Online]. Available: https://bitcoil.co.il/Doublespend.pdf
59. Vector67. (2011). Fake Bitcoins? [Online]. Available: https://bitcointalk. org/index.php?topic=36788.msg463391\#msg463391
60. H. Finney. (2011). Best Practice for Fast Transaction Acceptance-How High is the Risk? [Online]. Available: https://bitcointalk.org/index.php? topic=3441.msg48384\#msg48384
61. I. Eyal and E. G. Sirer,"Majority is not enough: Bitcoin mining is vulnerable," in Proc. 18th Int. Conf. Financial Cryptogr. Data Secur., Mar. 2014, pp. 436-454.
62. P. Wuille,"BIP 62: Dealing with malleability," Mar. 2014 [Online]. Available: https://github.com/bitcoin/bips/blob/master/bip-0062.mediawiki
63. C. Decker and R. Wattenhofer,"Bitcoin transaction malleability and MtGox," in Proc. 19th Eur. Symp. Res. Comput. Secur. (ESORICS-14), Sep. 2014, pp. 313-326.
64. corbixgwelt. (2011, May). Timejacking & Bitcoin [Online]. Available: http://culubas.blogspot.de/2011/05/timejacking-bitcoin-802.html.
65. B. Cohen. (2014, Nov.). An Attack on the Timestamp Semantics of Bitcoin [Online]. Available: http://bramcohen.com/2014/11/03/anattack-on-the-timestamp-semantics-of-bitcoin
66. E. Heilman, A. Kendler, A. Zohar, and S. Goldberg,"Eclipse attacks on bitcoin's peer-to-peer network," in Proc. 24th USENIX Secur. Symp. (USENIX Secur.-15), Aug. 2015, pp. 129-144.
67. C. Decker and R. Wattenhofer,"Information propagation in the bitcoin network," in Proc. 13th IEEE Int. Conf. Peer-to-Peer Comput. P2P-13, Sep. 2013, pp. 1-10.
68. Y. Sompolinsky and A. Zohar,"Secure high-rate transaction processing in bitcoin," in Proc. 19th Int. Conf. Financial Cryptogr. Data Secur. (FC-15), Jan. 2015, pp. 507-527.
69. J. A. Kroll, I. C. Davey, and E. W. Felten,"The economics of bitcoin mining, or bitcoin in the presence of adversaries," in Proc. 12th Workshop Econ. Inf. Secur., Jun. 2013.
70. A. Gervais, G. Karame, S. Capkun, and V. Capkun,"Is bitcoin a decentralized currency? in Proc. 35th IEEE Symp. Secur. Privacy (SP-14), May 2014, pp. 54-60.
71. A. Gervais, H. Ritzdorf, G. O. Karame, and S. Capkun,"Tampering with the delivery of blocks and transactions in bitcoin," in Proc. 22nd ACM Conf. Comput. Commun. Secur. (CCS-15), Oct. 2015, pp. 692-705.
72. A. Biryukov, D. Khovratovich, and I. Pustogarov,"Deanonymisation of clients in bitcoin p2p network," in Proc. 21st ACM Conf. Comput. Commun. Secur., Nov. 2014, pp. 15-29.
73. F. Reid and M. Harrigan,"An analysis of anonymity in the bitcoin system," in Security and Privacy in Social Networks. New York, NY, USA: Springer, 2013, pp. 197-223.
74. S. Meiklejohn et al.,"A fistful of bitcoins: Characterizing payments among men with no names," in Proc. 13th ACM SIGCOMM Conf. Internet Meas. (IMC-13), Oct. 2013, pp. 127-140.
75. E. Androulaki, G. Karame, M. Roeschlin, T. Scherer, and S. Capkun,"Evaluating user privacy in bitcoin," in Proc. 17th Int. Conf. Financ. Cryptogr. Data Secur., Apr. 2013, pp. 34-51.
76. S. Goldfeder et al.,"Securing bitcoin wallets via a new DSA/ECDSA threshold signature scheme," Tech. Rep., 2015 [Online]. Available: http://www.cs.princeton.edu/stevenag/threshold- sigs.pdf.
77. A. Shamir,"How to share a secret," Commun. ACM, vol. 22, no. 11, pp. 612-613, 1979.
78. V. S. Miller,"Use of elliptic curves in cryptography," in Proc. 5th Conf. Adv. Cryptol., Aug. 1985, pp. 417-426.
79. N. Koblitz,"Elliptic curve cryptosystems," Math. Comput., vol. 48, no. 177, pp. 203-209, 1987.
80. P. Gallagher and C. Kerry. (2013, Jul.). Federal Information Processing Standards (FIPS) Publication 186-4: Digital Signature Standard (DSS) [Online]. Available: http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS. 186-4.pdf
81. D. R. L. Brown. (2010). SEC 2: Recommended Elliptic Curve Domain Parameters, Standards for Efficient Cryptography Group (SECG) [Online]. Available: http://www.secg.org/sec2-v2.pdf
82. A. Dmitrienko, D. Noack, A. Sadeghi, and M. Yung,"On offline payments with bitcoin (poster abstract)," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 159-160.
83. T. Ruffing, A. Kate, and D. Schröder,"Liar, liar, coins on fire!: Penalizing equivocation by loss of bitcoins," in Proc. 22nd ACM Conf. Comput. Commun. Secur., Oct. 2015, pp. 219-230.
84. I. Osipkov, E. Y. Vasserman, N. Hopper, and Y. Kim,"Combating double-spending using cooperative P2P systems," in Proc. 27th Int. Conf. Distrib. Comput. Syst. (ICDCS-07), Jun. 2007, p. 41.
85. J.-H. Hoepman,"Distributed double spending prevention," in Proc. 15th Int. Workshop Secur. Protocols (SPW-07), Apr. 2007, pp. 152-165.
86. N. T. Courtois,"On the longest chain rule and programmed selfdestruction of crypto currencies," Computing Research Repository, Tech. Rep. abs/1405.0534, 2014.
87. W. Feller, An Introduction to Probability Theory and Its Applications. New York, NY, USA: Wiley, 1957.
88. G. O. Karame, E. Androulaki, and S. Capkun,"Double-spending fast payments in bitcoin," in Proc. 19th ACM Conf. Comput. Commun. Secur. (CCS-12), Oct. 2012, pp. 906-917.
89. G. O. Karame, E. Androulaki, M. Roeschlin, A. Gervais, and S. Capkun,"Misbehavior in bitcoin: A study of double-spending and accountability," ACM Trans. Inf. Syst. Secur., vol. 18, no. 1, pp. 2:1-2:32, 2015.
90. M. Rosenfeld,"Analysis of bitcoin pooled mining reward systems," Computing Research Repository, Tech. Rep. abs/1112.4980, 2011.
91. N. T. Courtois and L. Bahack,"On subversive miner strategies and block withholding attack in bitcoin digital currency," Computing Research Repository, Tech. Rep. abs/1402.1718, 2014.
92. M. Möser, R. Böhme, and D. Breuker,"Towards risk scoring of bitcoin transactions," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014.
93. M. Andrychowicz, S. Dziembowski, D. Malinowski, and L. Mazurek,"On the malleability of bitcoin transactions," in Proc. 2nd Workshop Bitcoin Res., Jan. 2015, pp. 1-18.
94. M. Vasek, M. Thornton, and T. Moore,"Empirical analysis of denial-ofservice attacks in the bitcoin ecosystem," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 57-71.
95. G. G. Dagher, B. Bünz, J. Bonneau, J. Clark, and D. Boneh,"Provisions: Privacy-preserving proofs of solvency for bitcoin exchanges," in Proc. 22nd ACM Conf. Comput. Commun. Secur. (CCS-15), Oct. 2015, pp. 720-731.
96. T. Moore and N. Christin,"Beware the middleman: Empirical analysis of bitcoin-exchange risk," in Proc. 17th Int. Conf. Financial Cryptogr. Data Secur., Apr. 2013, pp. 25-33.
97. I. Eyal and E. G. Sirer. (2014, Jun.). How to Disincentivize Large Bitcoin Mining Pools [Online]. Available: http://hackingdistributed.com/2014/06/18/how-to-disincentivize-large-bitcoin-mining-pools/
98. N. Hajdarbegovic. (2014, Jan.). Bitcoin Miners Ditch Ghash.io Pool Over Fears of 51% Attack, Coindesk [Online]. Available: http://www. coindesk.com/bitcoin-miners-ditch-ghash-io-pool-51-attack/
99. A. Miller, A. E. Kosba, J. Katz, and E. Shi,"Nonoutsourceable scratchoff puzzles to discourage bitcoin mining coalitions," in Proc. 22nd ACM Conf. Comput. Commun. Secur. (CCS-15), Oct. 2015, pp. 680-691.
100. A. Miller, A. Juels, E. Shi, B. Parno, and J. Katz,"Permacoin: Repurposing bitcoin work for data preservation," in Proc. IEEE 35th Symp. Secur. Privacy (SP-14), May 2014, pp. 475-490.
101. B. Johnson, A. Laszka, J. Grossklags, M. Vasek, and T. Moore,"Game-theoretic analysis of DDoS attacks against bitcoin mining pools," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 72-86.
102. A. Laszka, B. Johnson, and J. Grossklags,"When bitcoin mining pools run dry: A game-theoretic analysis of the long-term impact of attacks between mining pools," in Proc. 2nd Workshop Bitcoin Res. (BITCOIN-15), Jan. 2015, pp. 63-77.
103. L. Bahack,"Theoretical bitcoin attacks with less than half of the computational power (draft)," IACR Cryptology ePrint Archive, Tech. Rep. 2013/868, 2013.
104. I. Eyal,"The miner's dilemma," in Proc. 36th IEEE Symp. Secur. Privacy (SP-15), May 2015, pp. 89-103.
105. J. Göbel, H. P. Keeler, A. E. Krzesinski, and P. G. Taylor,"Bitcoin blockchain dynamics: The selfish-mine strategy in the presence of propagation delay," Computing Research Repository, Tech. Rep. abs/1505.05343, 2015.
106. E. Heilman,"One weird trick to stop selfish miners: Fresh bitcoins, a solution for the honest miner," in Proc. 18th Int. Conf. Financial Cryptogr. Data Secur. (FC-14), Mar. 2014.
107. S. D. Lerner. (2014, May). Decor+ [Online]. Available: https://bitslog.wordpress.com/2014/05/07/decor-2/
108. D. Mills, J. Martin, J. Burbank, and W. Kasch. (2010, Jun.). Network Time Protocol Version 4: Protocol and Algorithms Specification, RFC 5905 (Proposed Standard), Internet Engineering Task Force [Online]. Available: http://www.ietf.org/rfc/rfc5905.txt
109. (2003). The Annotated Gnutella Protocol Specification v0.4 [Online]. Available: http://rfc-gnutella.sourceforge.net/developer/stable/
110. Q. Lv, S. Ratnasamy, and S. Shenker,"Can heterogeneity make Gnutella scalable?," in Proc. 1st Int. Workshop Peer Peer Syst. (IPTPS-02), Mar. 2002, pp. 94-103.
111. Y. Chawathe, S. Ratnasamy, L. Breslau, N. Lanham, and S. Shenker,"Making Gnutella-like P2P systems scalable," in Proc. Conf. Appl. Technol. Archit. Protocols Comput. Commun. (SIGCOMM03), Aug. 2003, pp. 407-418.
112. EB3full. (2014, May). simbit-P2P Network Simulator [Online]. Available: https://bitcointalk.org/index.php?topic=603171.0
113. A. Miller and R. Jansen,"Shadow-bitcoin: Scalable simulation via direct execution of multi-threaded applications," in Proc. 8th Workshop Cyber Secur. Exp. Test, Aug. 2015.
114. T. Neudecker, P. Andelfinger, and H. Hartenstein,"A simulation model for analysis of attacks on the bitcoin peer-to-peer network," in Proc. IFIP/IEEE Int. Symp. Integr. Netw. Manage. (IM-15), May 2015, pp. 1327-1332.
115. J. A. D. Donet, C. Pérez-Sola, and J. Herrera-Joancomarti,"The bitcoin P2P network," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 87-102.
116. S. Feld, M. Schönfeld, and M. Werner,"Analyzing the deployment of bitcoin's P2P network under an AS-level perspective," in Proc. 5th Int. Conf. Ambient Syst. Netw. Technol. (ANT-14), June 2014, pp. 1121-1126.
117. A. Miller et al.,"Discovering bitcoin's public topology and influential nodes," Tech. Rep., May 2015 [Online]. Available: https://cs.umd.edu/projects/coinscope/coinscope.pdf
118. P. Koshy, D. Koshy, and P. McDaniel,"An analysis of anonymity in bitcoin using P2P network traffic," Mar. 2014, pp. 469-485.
119. T. Bamert, C. Decker, L. Elsen, R. Wattenhofer, and S. Welten,"Have a snack, pay with bitcoins," in Proc. 13th IEEE Int. Conf. Peer Peer Comput. (P2P-13), Sep. 2013, pp. 1-5.
120. J. A. Garay, A. Kiayias, and N. Leonardos,"The bitcoin backbone protocol: Analysis and applications," in Proc. 34th Int. Conf. Theory Appl. Cryptogr. Techn. (EUROCRYPT-15), Apr. 2015, pp. 281-310.
121. D. Kaminsky (2011, Aug.). Black OPS of TCP/IP, Black Hat USA, 2011 [Online]. Available: http://dankaminsky.com/2011/08/05/bo2k11/
122. T. Klingberg and R. Manfredi. (2002, Jun.). Gnutella 0.6 [Online]. Available: http://rfc-gnutella.sourceforge.net/src/rfc-0/-6-draft.html
123. S. L. Reed,"Bitcoin cooperative proof-of-stake," Computing Research Repository, Tech. Rep. abs/1405.5741, 2014.
124. B. H. Bloom,"Space/time trade-offs in hash coding with allowable errors," Commun. ACM, vol. 13, no. 7, pp. 422-426, 1970.
125. M. Hearn and M. Corallo,"BIP 37: Connection bloom filtering," Oct. 2012 [Online]. Available: https://github.com/bitcoin/bips/blob/master/bip-0037.mediawiki
126. G. Danezis and S. Meiklejohn,"Centrally banked cryptocurrencies," IACR Cryptology ePrint Archive, Tech. Rep. 502, 2015.
127. J. Bruce,"The mini-blockchain scheme," Tech. Rep., Jul. 2014, Rev. 2 [Online]. Available: http://cryptonite.info/files/mbc-scheme-rev2.pdf
128. N. T. Courtois, P. Emirdag, and D. A. Nagy,"Could bitcoin transactions be 100x faster?," in Proc. 11th Int. Conf. Secur. Cryptogr. (SECRYPT-14), Aug. 2014, pp. 426-431.
129. B. Laurie,"Decentralised currencies are probably impossible but let's at least make them efficient," Tech. Rep., 2011 [Online]. Available: http://www.links.org/files/decentralised-currencies.pdf
130. R. Dingledine, N. Mathewson, and P. Syverson,"Tor: The secondgeneration onion router," in Proc. 13th USENIX Secur. Symp. (USENIX Security-04), Aug. 2004, pp. 303-320.
131. D. M. Goldschlag, M. G. Reed, and P. F. Syverson,"Hiding routing information," in Proc. 1st Int. Workshop Inf. Hiding (IHW-01), May 1996, pp. 137-150.
132. A. Biryukov and I. Pustogarov,"Bitcoin over Tor isn-t a good idea," in Proc. 36th IEEE Symp. Secur. Privacy (SP-15),May 2015, pp. 122-134.
133. Bitcoin Development Mailing Lists. (2014). Outbound Connections Rotation [Online]. Available: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2014-August/006502.html
134. L."verlier and P. Syverson,"Locating hidden servers," in Proc. 27th IEEE Symp. Secur. Privacy (SP-06), May 2006, pp. 100-114.
135. T. Elahi, K. Bauer, M. AlSabah, R. Dingledine, and I. Goldberg,"Changing of the guards: A framework for understanding and improving entry guard selection in Tor," in Proc. ACM Workshop Privacy Electron. Soc. (WPES-12), Oct. 2012, pp. 43-54.
136. R. Dingledine, N. Hopper, G. Kadianakis, and N. Mathewson,"One fast guard for life (or 9 months)," in Proc. 7th Workshop Hot Topics Privacy Enhancing Technol. (HotPETs-14), Jul. 2014.
137. S. T. Ali, P. McCorry, P. H.-J. Lee, and F. Hao,"Zombiecoin: Powering next-generation botnets with bitcoin," in Proc. 2nd Workshop Bitcoin Res. (BITCOIN-15), Jan. 2015, pp. 34-48.
138. D. Plohmann and E. Gerhards-Padilla,"Case study of the miner botnet," in Proc. 4th Int. Conf. Cyber Conflict (CYCON-12), Jun. 2012, pp. 1-16.
139. D. Y. Huang et al.,"Botcoin: Monetizing stolen cycles," in Proc. Netw. Distrib. Syst. Secur. Symp. (NDSS-14), Feb. 2014.
140. J. Heusser. (2013, Feb.). SAT Solving-An Alternative to Brute Force Bitcoin Mining [Online]. Available: https://jheusser.github.io/2013/02/03/satcoin.html
141. J. A. Dev,"Bitcoin mining acceleration and performance quantification," in Proc. 27th IEEE Can. Conf. Elect. Comput. Eng. (CCECE-14), May 2014, pp. 1-6.
142. R. Ragan and O. Salazar. (2014, Aug.). Cloudbots: Harvesting Crypto Coins Like a Botnet Farmer, Black Hat USA [Online]. Available: http://www.http://slideshare.net/rob.ragan/cloudbots-harvesting-crypto-currency-like-a-botnet-farmer
143. Vinced. (2011, Apr.). Namecoin-A Distributed Naming System Based on Bitcoin [Online]. Available: https://bitcointalk.org/index.php?topic= 6017.0
144. J. Szefer and R. B. Lee,"Bitdeposit: Deterring attacks and abuses of cloud computing services through economic measures," in Proc. 13th IEEE/ACM Int. Symp. Cluster Cloud Grid Comput. (CCGRID-13), May 2013, pp. 630-635.
145. J. Warren,"Bitmessage: A peer-to-peer message authentication and delivery system," Tech. Rep., Nov. 2012 [Online]. Available: https://bitmessage.org/bitmessage.pdf
146. Z. Wilcox-O'Hearn (2010, Jan.). Names: Distributed, Secure, Human-Readable: Choose Two [Online]. Available: http://web.archive.org/web/20011020191610/http://zooko.com/distnames.html
147. A. Schwartz. (2011, Jan.). Squaring the Triangle: Secure, Decentralized, Human-Readable Names [Online]. Available: http://www.aaronsw.com/weblog/squarezooko
148. Kiba. (2010, Dec.). BitDNS Bounty (3500 BTC) [Online]. Available: https://bitcointalk.org/index.php?topic=2072.0
149. D. Barok,"Bitcoin: Censorship-resistant currency and domain system for the people," Networked Media, Piet Zwar Institute, Rotterdam, The Netherlands, Tech. Rep., Jul. 2011.
150. C. Fromknecht, D. Velicanu, and S. Yakoubov,"CertCoin: A namecoin based decentralized authentication system," Massachusetts Inst. Technol., Cambridge, MA, USA, Tech. Rep., 6.857 Class Project, May 2014.
151. A. Narayanan and V. Shmatikov,"De-anonymizing social networks," in Proc. 30th IEEE Symp. Secur. Privacy (SP-09),May 2009, pp. 173-187.
152. L. Backstrom, C. Dwork, and J. Kleinberg,"Wherefore art thou R3579X?: Anonymized social networks, hidden patterns, and structural steganography," in Proc. 16th Int. World Wide Web Conf. ( WWW-07), Apr. 2007, pp. 181-190.
153. A. Narayanan and V. Shmatikov,"Robust de-anonymization of large sparse datasets," in Proc. 29th IEEE Symp. Secur. Privacy (SP-08), May 2008, pp. 111-125.
154. M. Ober, S. Katzenbeisser, and K. Hamacher,"Structure and anonymity of the bitcoin transaction graph," Future Internet, vol. 5, no. 2, pp. 237-250, 2013.
155. A. Baumann, B. Fabian, and M. Lischke,"Exploring the bitcoin network," in Proc. 10th Int. Conf. Web Inf. Syst. Technol. (WebDB-04), Apr. 2014, pp. 369-374.
156. D. Ron and A. Shamir,"How did dread pirate roberts acquire and protect his bitcoin wealth? in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 3-15.
157. M. Vasek and T. Moore,"There's no free lunch, even using bitcoin: Tracking the popularity and profits of virtual currency scams," in Proc. 19th Int. Conf. Financial Cryptogr. Data Secur. (FC-15), Jan. 2015, pp. 44-61.
158. J. Vornberger,"Marker addresses: Adding identification information to bitcoin transactions to leverage existing trust relationships," in Proc. 42nd GI Jahrestagung (INFORMATIK-12), Sep. 2012, pp. 28-38.
159. D. Vandervort,"Challenges and opportunities associated with a bitcoinbased transaction rating system," in Proc. 18th Int. Conf. Financial Cryptogr. Data Secur. (FC-14), Mar. 2014, pp. 33-42.
160. G. Maxwell. (2013, Aug.). Coinjoin: Bitcoin Privacy for the Real World [Online]. Available: https://bitcointalk.org/index.php?topic=279249.0
161. M. Spagnuolo, F. Maggi, and S. Zanero,"Bitiodine: Extracting intelligence from the bitcoin network," in Proc. 18th Int. Conf. Financial Cryptogr. Data Secur. (FC-14), Mar. 2014, pp. 457-468.
162. L. Page, S. Brin, R. Motwani, and T. Winograd,"The pagerank citation ranking: Bringing order to the web," Stanford InfoLab, Tech. Rep. 1999-66, Nov. 1999.
163. D. Ferrin,"A preliminary field guide for bitcoin transaction patterns," in Proc. Texas Bitcoin Conf., 2015.
164. A. Greenberg. (2013, Aug.). An InterviewWith a Digital Drug Lord: The Silk Road's Dread Pirate Roberts (Q&A), Forbes Magazine [Online]. Available: http://www.forbes.com/sites/andygreenberg/2013/08/14/aninterview-with-a-digital-drug-lord-the-silk-roads-dread-pirate-robertsqa/
165. M. Möser, R. Böhme, and D. Breuker,"An inquiry into money laundering tools in the bitcoin ecosystem," Sep. 2013.
166. S. meiklejohn and C. Orlandi,"Privacy-enhancing overlays in bitcoin," in Proc. 2nd Workshop Bitcoin Res. (BITCOIN-15), Jan. 2015, pp. 127-141.
167. G. Danezis, R. Dingledine, and N.Mathewson,"Mixminion: Design of a type III anonymous remailer protocol," in Proc. 24th IEEE Symp. Secur. Privacy (SP-03), May 2003, pp. 2-15.
168. U. Möller, L. Cottrell, P. Palfrader, and L. Sassaman,"Mixmaster Protocol-Version 2," IETF Internet Draft, Jul. 2003.
169. A. Serjantov, R. Dingledine, and P. Syverson,"From a trickle to a flood: Active attacks on several mix types," in Proc. 5th Int. Workshop Inf. Hiding (IHW-02), Oct. 2002, pp. 36-52.
170. C. Diaz and A. Serjantov,"Generalising mixes," in Proc. Privacy Enhancing Technol. Workshop (PET-03), Mar. 2003, pp. 18-31.
171. J.-F. Raymond,"Traffic analysis: Protocols, attacks, design issues, and open problems," in Proc. Int. Workshop Des. Privacy Enhancing Technol. Des. Issues Anonymity Unobservability (PET-00), Jul. 2000, pp. 10-29.
172. P. Syverson, G. Tsudik, M. Reed, and C. Landwehr,"Towards an analysis of onion routing security," in Proc. Int. Workshop Des. Privacy Enhancing Technol. Des. Issues Anonymity Unobservability (PET-00), Jul. 2000, pp. 96-114.
173. A. Johnson, C. Wacek, R. Jansen, M. Sherr, and P. Syverson,"Users get routed: Traffic correlation on Tor by realistic adversaries," in Proc. 20th ACM Conf. Comput. Commun. Secur. (CCS-13), Oct. 2013, pp. 337-348.
174. J. Bonneau, A. Narayanan, A. Miller, J. Clark, J. A. Kroll, and E.W. Felten,"Mixcoin: Anonymity for bitcoin with accountable mixes," in Proc. 18th Int. Conf. Financial Cryptogr. Data Secur. (FC-14), Mar. 2014, pp. 486-504.
175. A. M. F. B. Blindcoin Blinded,"Luke Valenta and Vrendan Rowan," in Proc. 2nd Workshop Bitcoin Res. (BITCOIN-15), Jan. 2015, pp. 112-126.
176. K. Atlas. (2014). Coinjoin Sudoku [Online]. Available: http://www. coinjoinsudoku.com
177. Michael-S (bitcointalk.org). (2014, May). Why Coinjoin, as Used in Darkcoin, Does not Bring Full Anonymity [Online]. Available: http://www.scribd.com/doc/227369807/Bitcoin-Coinjoin-Not-Anonymousv01
178. E. Duffield and K. Hagan,"Darkcoin: Peer-to-peer crypto-currency with anonymous blockchain transactions and an improved proof-ofwork system," Mar. 2014 [Online]. Available: http://www.darkcoin.io/downloads/DarkcoinWhitepaper.pdf
179. W. Ladd,"Blind signatures for bitcoin transaction anonymity," Tech. Rep., 2013 [Online]. Available: http://wbl.github.io/bitcoinanon.pdf
180. T. Ruffing, P. Moreno-Sanchez, and A. Kate,"Coinshuffle: Practical decentralized coin mixing for bitcoin," in Proc. 7th Workshop Hot Topics Privacy Enhancing Technol. (HotPETs-14), Sep. 2014, pp. 345-364.
181. A. Saxena, J. Misra, and A. Dhar,"Increasing anonymity in bitcoin," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 122-139.
182. D. Boneh, C. Gentry, B. Lynn, and H. Shacham,"Aggregate and verifiably encrypted signatures from bilinear maps," in Proc. 22nd Int. Conf. Theory Appl. Cryptogr. Techn. (EUROCRYPT-03), May 2003, pp. 416-432.
183. M. Andrychowicz, S. Dziembowski, D. Malinowski, and L. Mazurek,"Fair two-party computations via bitcoin deposits," in Proc. 1st Workshop Bitcoin Res. (BITCOIN-14), Mar. 2014, pp. 105-121.
184. I. Bentov and R. Kumaresan,"How to use bitcoin to design fair protocols," in Proc. 34th Annu. Conf. Adv. Cryptol. (CRYPTO-14), Aug. 2014, pp. 421-439.
185. G. D. Bissias, A. P. Ozisik, B. N. Levine, and M. Liberatore,"Sybilresistant mixing for bitcoin," in Proc. 13th ACM Workshop Privacy Electron. Soc. (WPES-14), Nov. 2014, pp. 149-158.
186. M. Blum, P. Feldman, and S. Micali,"Non-interactive zero-knowledge and its applications," in Proc. 20th Annu. ACM Symp. Theory Comput. (STOC-88), May 1988, pp. 103-112.
187. I. Miers, C. Garman, M. Green, and A. D. Rubin,"Zerocoin: Anonymous distributed e-cash from bitcoin," in Proc. 34th IEEE Symp. Secur. Privacy (SP-13), May 2013, pp. 397-411.
188. E. Androulaki and G. O. Karame,"Hiding transaction amounts and balances in bitcoin," in Proc. 7th Int. Conf. Trust Trustworthy Comput. (TRUST-14), Jun. 2014, pp. 161-178.
189. E. Ben-Sasson et al.,"Zerocash: Decentralized anonymous payments from bitcoin," in Proc. 35th IEEE Symp. Secur. Privacy (SP-14), May 2014, pp. 459-474.
190. N. van Saberhagen,"Cryptonote v2.0," Tech. Rep., Oct. 2013 [Online]. Available: https://cryptonote.org/whitepaper.pdf
191. W. Diffie and M. E. Hellman,"New directions in cryptography," IEEE Trans. Inf. Theory, vol. IT-22, no. 6, pp. 644-654, Nov. 1976.
192. R. L. Rivest, A. Shamir, and Y. Tauman,"How to leak a secret," in Proc. 7th Int. Conf. Theory Appl. Cryptol. Inf. Secur. (ASIACRYPT-01), Dec. 2001, pp. 552-565.
193. E. Fujisaki and K. Suzuki,"Traceable ring signature," in Proc. 10th Int. Conf. Pract. Theory Public-Key Cryptogr. (PKC-07), Apr. 2007, pp. 181-200.
194. M. J. Fischer, N. A. Lynch, and M. S. Paterson,"Impossibility of distributed consensus with one faulty process," J. ACM, vol. 32, no. 2, pp. 374-382, 1985.
195. D. Dolev, C. Dwork, and L. Stockmeyer,"On the minimal synchronism needed for distributed consensus," J. ACM, vol. 34, no. 1, pp. 77-97, 1987.
196. N. Lynch,"A hundred impossibility proofs for distributed computing," in Proc. 8th ACM Symp. Principles Distrib. Comput. (PODC-89), Aug. 1989, pp. 1-28.
197. J. Turek and D. Shasha,"The many faces of consensus in distributed systems," IEEE Comput., vol. 25, no. 6, pp. 8-17, Jun. 1992.
198. J. Aspnes,"Randomized protocols for asynchronous consensus," Distrib. Comput., vol. 16, nos. 2-3, pp. 165-175, 2003.
199. D. Angluin, M. J. Fischer, and H. Jiang,"Stabilizing consensus in mobile networks," in Proc. 2nd Int. IEEE Conf. Distrib. Comput. Sensor Syst. (DCOSS-06), Jun. 2006, pp. 37-50.
200. D. Schwartz, N. Youngs, and A. Britto,"The ripple protocol consensus algorithm," Tech. Rep., 2014 [Online]. Available: https://ripple.com/files/ripple-consensus-whitepaper.pdf
201. M. K. Aguilera,"Stumbling over consensus research: Misunderstandings and issues," in Replication. New York, NY, USA: Springer, 2010, pp. 59-72.
202. C. Dwork and M. Naor,"Pricing via processing or combatting junk mail," in Proc. 13th Conf. Adv. Cryptol. (CRYPTO-93), Aug. 1993, pp. 139-147.
203. J. Aspnes, C. Jackson, and A. Krishnamurthy,"Exposing computationally-challenged Byzantine impostors," Dept. Comput. Sci., Yale Univ., Tech. Rep. YALEU/DCS/TR-1332, Jul. 2005.
204. S. Nakamoto. (2008, Nov.). Re: Bitcoin P2P e-Cash Paper [Online]. Available: https://www.mail-archive.com/cryptography@metzdowd. com/msg09997.html
205. A. Miller. (2012, Aug.). Bitcoin Theory (Byzantine Generals and Beyond) [Online]. Available: https://bitcointalk.org/index.php?topic= 99631.0
206. R. Chaves, G. Kuzmanov, L. Sousa, and S. Vassiliadis,"Cost-efficient SHA hardware accelerators," IEEE Trans. Very Large Scale Integr. Syst., vol. 16, no. 8, pp. 999-1008, Aug. 2008.
207. M. Bedford Taylor,"Bitcoin and the age of bespoke silicon," in Proc. 8th Int. Conf. Compilers Archit. Synth. Embedded Syst. (CASES-13), Sep. 2013, pp. 1-10.
208. K. J. O'Dwyer and D. Malone,"Bitcoin mining and its energy footprint," in Proc. 25th IET Irish Signals Syst. Conf. (ISSC-14), Jun. 2014, pp. 280-285.
209. N. T. Courtois, M. Grajek, and R. Naik,"The unreasonable fundamental incertitudes behind bitcoin mining," Computing Research Repository, Tech. Rep. abs/1310.7935, 2013.
210. N. T. Courtois, M. Grajek, and R. Naik,"Optimizing SHA256 in bitcoin mining," in Proc. 3rd Int. Conf. Cryptogr. Secur. Syst. (CSS06), Sep. 2014, pp. 131-144.
211. D. Kondor, M. Pósfai, I. Csabai, and G. Vattay,"Do the rich get richer? An empirical analysis of the bitcoin transaction network," Computing Research Repository, Tech. Rep. abs/1308.3892, 2013.
212. C. Dwork, A. Goldberg, and M. Naor,"On memory-bound functions for fighting spam," in Proc. 23rd Annu. Int. Cryptol. Conf. (CRYPTO03), Aug. 2003, pp. 426-444.
213. M. Abadi, M. Burrows, M. Manasse, and T. Wobber,"Moderately hard, memory-bound functions," TOIT ACM Trans. Internet Technol., vol. 5, no. 2, pp. 299-327, May 2005.
214. C. Percival,"Stronger key derivation via sequential memoryhard functions," in Proc. Tech. BSD Conf. (BSDCan09), May 2009.
215. M. Hearn. (2014, Jul.). Mining Decentralisation: The Low Hanging Fruit, Bitcoin Foundation [Online]. Available: https://bitcoinfoundation. org/2014/07/03/mining-decentralisation-the-low-hanging-fruit/
216. B. D. M. Lists. (2014). ASIC-Proof Mining [Online]. Available: http://sourceforge.net/p/bitcoin/mailman/bitcoin-development/thread/53B714A8.1080603@codehalo.com/
217. A. Coventry,"Nooshare: A decentralized ledger of shared computational resources," Tech. Rep., Apr. 2012 [Online]. Available: http://web. mit.edu/alex-c/www/nooshare.pdf
218. S. King,"Primecoin: Cryptocurrency with prime number proof-ofwork," Tech. Rep., 2013 [Online]. Available: http://primecoin.io/bin/primecoin-paper.pdf
219. Koooooj. (2013, Nov.). Good News for Primecoin: One Such Coin That Exists Today That Will Actually Never Have ASICS Developed for it is Primecoin [Online]. Available: http://redd.it/1ra887
220. S. D. Lerner,"MAVEPAY, a new lightweight payment scheme for peer to peer currency networks," Tech. Rep., Apr. 2012 [Online]. Available: https://bitslog.files.wordpress.com/2012/04/mavepay1.pdf
221. J. Bonneau and A. Miller,"Fawkescoin: A cryptocurrency without public-key cryptography," in Proc. 22nd Int. Workshop Secur. Protocols (SPW14), Mar. 2014.
222. S. D. Lerner,"MAVE, new lightweight digital signature protocols for massive verifications," Tech. Rep., Apr. 2012 [Online]. Available: https://bitslog.files.wordpress.com/2012/04/mave1.pdf
223. R. Anderson, F. Bergadano, B. Crispo, J.-H. Lee, C. Manifavas, and R. Needham,"A new family of authentication protocols," ACM Oper. Syst. Rev., vol. 32, no. 4, pp. 9-20, 1998.
224. N. Houy,"The bitcoin mining game," GATE, Univ. Lyon, Tech. Rep. halshs-00958224, Mar. 2014.
225. G. Hardin,"The tragedy of the commons," Science, vol. 162, no. 3859, pp. 1243-1248, 1968.
226. I. Bentov, C. Lee, A. Mizrahi, and M. Rosenfeld,"Proof of activity: Extending bitcoin's proof of work via proof of stake," in Proc. 9th Workshop Econ. Netw. Syst. Comput. (NetEcon14), Jun. 2014, pp. 34-37.
227. S. King and S. Nadal,"Ppcoin: peer-to-peer crypto-currency with proof-of-stake," Tech. Rep., Aug. 2012 [Online]. Available: http://peercoin.net/assets/paper/peercoin-paper.pdf
228. S. King. (2013, Oct.). Peercointalk's Community Interview With Sunny King #1 [Online]. Available: http://www.peercointalk.org/index.php? topic=2216.0
229. N. Houy,"It will cost you nothing to"kill" a proof-of-stake cryptocurrency," Econ. Bull., vol. 34, no. 2, pp. 1038-1044, 2014.
230. D. Larimer,"Transactions as proof-of-stake," Tech. Rep., Nov. 2013.
231. D. Larimer. (2014). Delegated Proof-of-Stake (DPOS), bitshares [Online]. Available: https://bitshares.org/technology/delegated-proofof-stake-consensus/
232. M. Babaioff, S. Dobzinski, S. Oren, and A. Zohar,"On bitcoin and red balloons," in Proc. 13th ACM Conf. Electron. Commerce (EC13), Jun. 2012, pp. 56-73.
233. G. Pickard et al.,"Time critical social mobilization: The DARPA network challenge winning strategy," Computing Research Repository, Tech. Rep. abs/1008.3172, 2010.
234. L. Ren,"Proof of stake velocity: Building the social currency of the digital age," Tech. Rep., Apr. 2014 [Online]. Available: http://www.reddcoin.com/papers/PoSV.pdf
235. G. Paul, P. Sarkar, and S. Mukherjee,"Towards a more democratic mining in bitcoins," in Proc. 10th Int. Conf. Inf. Syst. Secur. (ICISS14), Dec. 2014, pp. 185-203.
236. D. S. Menasché, L. Massoulié, and D. F. Towsley,"Reciprocity and barter in peer-to-peer systems," in Proc. 29th Annu. Joint Conf. IEEE Comput. Commun. Soc. (INFOCOM10), Mar. 2010, pp. 1505-1513.
237. C. Aperjis, R. Johari, and M. J. Freedman,"Bilateral and multilateral exchanges for peer-assisted content distribution," IEEE/ACMTrans. Netw., vol. 19, no. 5, pp. 1290-1303, Oct. 2011.
238. A. Back and I. Bentov,"Note on fair coin toss via bitcoin," Computing Research Repository, Tech. Rep. abs/1402.3698, 2014.
239. M. Andrychowicz, S. Dziembowski, D. Malinowski, and L. Mazurek,"Secure multiparty computations on bitcoin," in Proc. IEEE 35th Symp. Secur. Privacy (SP14), May 2014, pp. 443-458.
240. R. Kumaresan, T. Moran, and I. Bentov,"How to use bitcoin to play decentralized poker," in Proc. ACM 22nd Conf. Comput. Commun. Secur. (CCS15:), Oct. 2015, pp. 195-206.
241. R. Kumaresan and I. Bentov,"How to use bitcoin to incentivize correct computations," in Proc. ACM 21st Conf. Comput. Commun. Secur. (CCS"14), Nov. 2014, pp. 30-41.
242. A. Back et al. (2014, Oct.)."Enabling blockchain innovations with pegged sidechains," Tech. Rep.[Online]. Available: http://www.blockstream.com/sidechains.pdf
243. M. Ghosh, M. Richardson, B. Ford, and R. Jansen,"A torpath to torcoin: Proof-of-bandwidth altcoins for compensating relays," in Proc. 7th Workshop Hot Topics Privacy Enhancing Technol. (HotPETs14), Jul. 2014.
244. R. Jansen, A. Miller, P. Syverson, and B. Ford,"From onions to shallots: Rewarding tor relays with tears," in Proc. 7th Workshop Hot Topics Privacy Enhancing Technol. (HotPETs14), Jul. 2014.
245. A. Biryukov and I. Pustogarov,"Proof-of-work as anonymous micropayment: Rewarding a tor relay," in Proc. 19th Int. Conf. Financial Cryptogr. Data Secur. (FC15), Jan. 2015, pp. 445-455.