MSTR Cat

Blockchain/Level I · Money/1.2 The cypherpunk road/Lesson 2

David Chaum, blind signatures and DigiCash

Signing through the envelope: privacy without identity

MaterialsAn envelope, a sheet of carbon paper and a slip of paper, to reproduce Chaum’s analogy

Wonder

  1. How can a bank sign a coin it has never seen?
  2. Why did a working digital cash system fail just as online shopping took off?
  3. What does ‘untraceable’ mean when the issuer keeps every record?

Explore

  1. David Chaum introduced mix networks in 1981 to break the link between sender and recipient. Messages passed through relays that decrypted a layer and batched and reordered traffic, so an observer could not match what went in with what came out. This foundational work established that anonymity could be engineered cryptographically rather than merely assumed by obscurity.
  2. In ‘Blind Signatures for Untraceable Payments’ (Crypto ‘82), Chaum described a mechanism where a signer signs data without knowing its content. The user blinds the message, the bank applies its private key signature to the blinded form, and the user unblinds it afterward. The resulting signature is valid on the original data, yet the bank retains no record of which specific token it signed.
  3. Chaum’s own analogy: seal a slip of paper inside an envelope lined with carbon paper. The signer signs the outside of the envelope, and the carbon transfers the signature onto the slip. Opened later, the slip carries a valid signature the signer never saw. In eCash the slip is a coin’s serial number, and the bank’s signature certifies its value.
  4. Chaum founded DigiCash in Amsterdam in 1989 to implement this as eCash. From 1995, Mark Twain Bank in St. Louis offered real accounts where customers could buy and spend digital coins. Payers were anonymous to the bank; merchants were not, because they deposited coins into accounts in their own names, and every deposit was checked online against the mint’s list of spent serial numbers.
  5. DigiCash filed for bankruptcy in 1998. Contemporary accounts point to management troubles, banks losing interest (Mark Twain Bank dropped eCash in 1998) and credit cards winning online payments. The design also tied every payment to one company’s mint, which had to check each coin online. This highlighted that privacy-preserving cryptography does not eliminate the need for a trusted issuer.
  6. Chaum’s legacy persists in privacy-preserving protocols like Chaumian ecash, Cashu, and Fedimint. His 1985 paper ‘Security without Identification’ argued for transaction systems that render Big Brother obsolete by separating identity from payment. This work directly influenced the cypherpunk movement, and showed that payment privacy could be built into the protocol rather than left to policy.

Key facts

  • David Chaum published ‘Blind Signatures for Untraceable Payments’ in 1983.
  • DigiCash was founded in Amsterdam in 1989 and filed for bankruptcy in 1998.
  • Mark Twain Bank offered eCash accounts starting in 1995.
  • Blind signatures allow a bank to sign a coin without seeing its serial number.
  • Chaum’s mix networks (1981) laid the groundwork for anonymous communication protocols.
  • DigiCash required online verification against a central spent-list to prevent double-spending.

Exercise nine, six, three, one

9CollectList 9 digital payment systems from 1980 to 2010. Note whether each allowed the payer or the payee to remain anonymous to the merchant.
6ClusterGroup the 9 into 6 categories based on who held the key records: full bank visibility, partial anonymity, no central record, or other structural models.
3DistillReduce the 6 groups to 3 reasons why most early systems prioritized traceability over privacy for merchants and regulators.
1CrystallizeWrite 1 sentence on what blind signatures solve and what they leave unsolved regarding double-spending.

Fact check

Dates, figures and claims checked against the published sources listed below.

Open in the interactive academy →

PT ES ZH JA KO RU DE FR MS