Abstract
One of the central challenges for mathematical cryptography is to create a payment system that provides the advantages of cash in a digital world. In this expository article we describe two very different solutions to this problem. The first is an elliptic-curve-based version of a construction of Brands, and the second is Bitcoin. We also discuss a generalization of Bitcoin that supports peer-to-peer contracts.

Similar content being viewed by others
Notes
A Bitcoin address is derived from the public key but is not identical to it, since it is convenient to shorten the address by hashing. However, we shall disregard such features of Bitcoin in the interest of simplicity.
The reward will be halved every 210,000 blocks until the year 2140, when the total number of bitcoins will reach 21 million; after that, the only incentive to miners will be the transaction fees.
http://ethereum.org, A next-generation smart contract and decentralized application platform (2015). http://github.com/ethereum/wiki/wiki/White-Paper (accessed 18 Nov 2015).
References
Adams D.: Analysis: U.S. sanctions make Cuba’s bank account too toxic for banks (2013). http://www.reuters.com/article/2013/11/29/us-cuba-usa-banking-analysis-idUSBRE9AS0QE20131129. Accessed 18 Nov 2015.
Brands S.: An efficient off-line electronic cash system based on the representation problem. Technical Report CS-R9323, CWI (1993).
Brands S.: Untraceable off-line cash in wallets with observers. In: Advances in Cryptology—Crypto’93. LNCS, vol. 773, pp. 302–318. Springer, Berlin (1994).
Chaum D.: Blind signatures for untraceable payments. In: Advances in Cryptology—Crypto’82, pp. 199–203. Plenum Press, New York (1983).
Diffie W., Hellman M.: New directions in cryptography. IEEE Trans. Inf. Theory IT-22, 644–654 (1976).
FIPS 180-3: Secure Hash Standard (SHS), Federal Information Processing Standards Publication 180-3, National Institute of Standards and Technology, Gaithersburg (2008).
FIPS 186-4: Digital Signature Standard (DSS), Federal Information Processing Standards Publication 186-4. National Institute of Standards and Technology, Gaithersburg (2013).
Galbraith S., Gaudry P.: Recent progress on the elliptic curve discrete logarithm problem. Des. Codes Cryptogr. (2015). doi:10.1007/s10623-015-0146-7.
Kiley B.: What marijuana businesses are doing with their stacks of cash (2014). http://www.thestranger.com/seattle/what-marijuana-businesses-are-doing-with-their-stacks-of-cash/Content?oid=20884534. Accessed 18 Nov 2015.
Law L., Sabett S., Solinas J.: How to make a mint: the cryptography of anonymous electronic cash. Am. Univ. Law Rev. 46, 1131–1162 (1996).
Matonis J.: WikiLeaks bypasses financial blockade with Bitcoin (2012). http://onforb.es/NATDQt. Accessed 18 Nov 2015.
Merkle R.C.: Protocols for public key cryptosystems. In: Proc. Symp. Security and Privacy, pp. 122–133. IEEE, Oakland (1980).
Nakamoto S.: Bitcoin: a peer-to-peer electronic cash system (2008). https://bitcoin.org/en/bitcoin-paper. Accessed 18 Nov 2015.
Pagliery J.: Bitcoin and the Future of Money. Triumph Books, Chicago (2014).
Szabo N.: Formalizing and securing relationships on public networks. First Monday, 2(9) (1997).
Taylor D.: Now that it’s over: the blockchain fork explained for regular users (2013). http://www.reddit.com/comments/1a51xx/. Accessed 18 Nov 2015.
Author information
Authors and Affiliations
Corresponding author
Additional information
This is one of several papers published in Designs, Codes and Cryptography comprising the 25th Anniversary Issue.
Rights and permissions
About this article
Cite this article
Koblitz, N., Menezes, A.J. Cryptocash, cryptocurrencies, and cryptocontracts. Des. Codes Cryptogr. 78, 87–102 (2016). https://doi.org/10.1007/s10623-015-0148-5
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s10623-015-0148-5