Privacy-Preserving Cross-Chain Atomic Swaps

Deshpande, Apoorvaa; Herlihy, Maurice

doi:10.1007/978-3-030-54455-3_38

Cited by 48 publications

(25 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…( [13] ) X-Chain Swap [8] ( ) Monero [1] Omniring [15] Our SwapCT ing is achieved by supporting transactions which exchange the ownership of tokens of different types. As they atomically swap the ownership of tokens, we name them atomic swap transactions.…”

Section: Sra Coa Cot Dse Nit Dex Mimblewimble [12]mentioning

confidence: 99%

“…Recipients' identities are protected by one-time addresses. To facilitate trade between such single type systems, there are multiple approaches, summarized by Zamyatin et al [21], even in a private setting with privacy-preserving cross-chain swaps [8]. Crosschain transactions generally create one transaction on each chain which privately reference each other.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

SwapCT: Swap Confidential Transactions for Privacy-Preserving Multi-Token Exchanges

Engelmann

Müller

Andreas

et al. 2021

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

Decentralized token exchanges allow for secure trading of tokens without a trusted third party. However, decentralization is mostly achieved at the expense of transaction privacy. For a fair exchange, transactions must remain private to hide the participants and volumes while maintaining the possibility for noninteractive execution of trades. In this paper we present a swap confidential transaction system (SwapCT) which is related to ring confidential transactions (e.g. used in Monero) but supports multiple token types to trade among and enables secure, partial transactions for noninteractive swaps. We prove that SwapCT is secure in a strict, formal model and present its efficient performance in a prototype implementation with logarithmic signature sizes for large anonymity sets. For our construction we design an aggregatable signature scheme which might be of independent interest. Our SwapCT system thereby enables a secure and private exchange for tokens without a trusted third party.

show abstract

Section: Sra Coa Cot Dse Nit Dex Mimblewimble [12]mentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

SwapCT: Swap Confidential Transactions for Privacy-Preserving Multi-Token Exchanges

Engelmann

Müller

Andreas

et al. 2021

Proceedings on Privacy Enhancing Technologies

View full text Add to dashboard Cite

show abstract

“…Adaptor Signatures. The notion of adaptor signatures was first introduced by Poelstra [39] and has since been used in many blockchain related applications, such as PCNs [32], payment channel hubs [45] or atomic swaps [14]. However, the adaptor signatures as a standalone primitive were only formalized later by Aumayr et al [2], where they were used to generalize the concept of payment channels.…”

Section: Related Workmentioning

confidence: 99%

“…To demonstrate the concept of adaptor signatures, let us discuss the simple example of a preimage sale which serves as an important building block in many blockchain applications such as payment channels [6,13,40,2], payment routing in payment channel networks (PCNs) [32,16,35] or atomic swaps [14,23]. Assume that a seller offers to reveal a preimage of a hash value h in exchange for c coins from a concrete buyer.…”

Section: Introductionmentioning

confidence: 99%

Two-Party Adaptor Signatures from Identification Schemes

Erwig

Faust

Hostáková

et al. 2021

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Adaptor signatures are a novel cryptographic primitive with important applications for cryptocurrencies. They have been used to construct second layer solutions such as payment channels or cross-currency swaps. The basic idea of an adaptor signature scheme is to tie the signing process to the revelation of a secret value in the sense that, much like a regular signature scheme, an adaptor signature scheme can authenticate messages, but simultaneously leaks a secret to certain parties. Recently, Aumayr et al. provide the first formalization of adaptor signature schemes, and present provably secure constructions from ECDSA and Schnorr signatures. Unfortunately, the formalization and constructions given in this work have two limitations: (1) current schemes are limited to ECDSA and Schnorr signatures, and no generic transformation for constructing adaptor signatures is known; (2) they do not offer support for aggregated two-party signing, which can significantly reduce the blockchain footprint in applications of adaptor signatures. In this work, we address these two shortcomings. First, we show that signature schemes that are constructed from identification (ID) schemes, which additionally satisfy certain homomorphic properties, can generically be transformed into adaptor signature schemes. We further provide an impossibility result which proves that unique signature schemes (e.g., the BLS scheme) cannot be transformed into an adaptor signature scheme. In addition, we define two-party adaptor signature schemes with aggregatable public keys and show how to instantiate them via a generic transformation from ID-based signature schemes. Finally, we give instantiations of our generic transformations for the Schnorr, Katz-Wang and Guillou-Quisquater signature schemes.

show abstract

“…1) HTLCs: Hash Time Locked Contracts (HTLCs) are conditional payments, supported by both, the Bitcoin scripting language and by smart contracts. They consist of a hash and a time lock and are mostly used to allow for off-chain payments over multiple untrusted hops [8], [18] as well as other applications [6]. A transaction that transfers x coins from A to B, secured with a HTLC can be represented by the function HT LC(A, B, x, y, t) [5].…”

Section: B Blockchainmentioning

confidence: 99%

Low-risk Privacy-preserving Electric Vehicle Charging with Payments

Unterweger¹,

Knirsch²,

Brunner³

et al. 2021

Proceedings Third International Workshop on Automotive and Autonomous Vehicle Security

View full text Add to dashboard Cite

and ordering requests and offers. Furthermore, some protocols propose blockchain technology for handling the payment.However, the proposed protocols often (i) do not cover customer privacy to a full extent; (ii) do not allow for combined bidding and payment transfer with limited risk for both, the EV and the charging station; and (iii) do not cover both, gridto-vehicle and vehicle-to-vehicle charging.Due to limited trust and anonymity in privacy-preserving systems, there is also a substantial financial risk for both, the EV (or the consumer in general) and the charging station (or the producer in general). While the EV runs the risk of paying without receiving a sufficient amount of energy (or any energy at all), the charging station runs the risk of providing energy and not receiving sufficient compensation. This is largely unaddressed in prior work.Following a privacy-preserving protocol for grid-to-vehicle charging presented in [11], in this paper, we present a comprehensive protocol for EV charging with payments. The protocol preserves the privacy of all participants and the location privacy of the EVs during the exploration and bidding phase. Furthermore, pseudonymity is preserved during the charging phase and the payment phase, and a parameter is proposed which allows for controlling risk. Two different implementations for transferring installments in exchange for energy are described and evaluated. These implementations are compared in terms of risk, scalability, performance and privacy.The rest of this paper is structured as follows: Section II describes EV charging, blockchain technology, hash timelocked contracts and state channels. Section III describes the proposed privacy-preserving protocol. Section IV evaluates the protocol with respect to risk, privacy and scalability. Section V provides an overview of related work. Section VI summarizes this paper. II. BACKGROUNDThis section summarizes the relevant background for EV charging and blockchain technology. A. Electric Vehicle ChargingOne of the most common types of EVs relies on batteries which need to be recharged from an electric power source [15]. Depending on their capacity and usage, these batteries may retain significant portions of their initial charge over longer periods of time. Three different types of charging can be distinguished [15], [20]: (i) G2V (Grid-to-Vehicle) Charging: The EV is charged by the power grid. This is the most common case and is usually done via a charging station, see e.g., [15] Abstract-The increasing amount of electric vehicles and a growing electric vehicle ecosystem is becoming a highly heterogeneous environment with a large number of participants that interact and communicate. Finding a charging station, performing vehicle-to-vehicle charging or processing payments poses privacy threats to customers as their location and habits can be traced. In this paper, we present a privacy-preserving solution for grid-to-vehicle charging, vehicle-to-grid charging and vehicleto-vehicle charging, that allows for finding the rig...

show abstract

Privacy-Preserving Cross-Chain Atomic Swaps

Cited by 48 publications

References 8 publications

SwapCT: Swap Confidential Transactions for Privacy-Preserving Multi-Token Exchanges

SwapCT: Swap Confidential Transactions for Privacy-Preserving Multi-Token Exchanges

Two-Party Adaptor Signatures from Identification Schemes

Low-risk Privacy-preserving Electric Vehicle Charging with Payments

Contact Info

Product

Resources

About