David Chaum (1955–)

Bitcoin’s whitepaper never cites David Chaum. It didn’t need to — by the time Satoshi Nakamoto released it, Chaum’s attempt at anonymous digital cash had already been built, sold to banks, and gone bankrupt, more than a decade earlier. Twenty-seven years before the genesis block, in 1982, he had already solved the privacy half of the problem. He had not solved the trust half, and that gap was one of the reasons DigiCash became a historical footnote while Bitcoin did not.

From mix networks to blind signatures (1955–1982)

Chaum was born in 1955 in Los Angeles, California. He earned a PhD in computer science from the University of California, Berkeley in 1982, advised by Bernard Marcel Mont-Reynaud. His dissertation, “Computer Systems Established, Maintained, and Trusted by Mutually Suspicious Groups,” opens its abstract: “A number of organizations who do not trust one another can build and maintain a highly-secured computer system that they can all trust (if they can agree on a workable design).” Only “a small mechanism, called a vault, need be physically secured,” and “Once a vault has been inspected and sealed, any attempt to open it will cause it to destroy its own information content.” Each vault signed, recorded, and broadcast the transactions it processed.

Each node’s consensus state carried a compression of the states before it, so that, in his words, “the checksum is actually ‘chained’ through the entire history of consensus states,” and no node would take a synchronized action “unless its entire history of CONSENSUS_ V-FUNCTIONS states is the same as every other node performing the action.” Chaum called this “largely a redundant mechanism.” It had no proof-of-work, which would not be theorized for another decade; its security rested on the vaults’ physical protection. Because Chaum never published the work in a conference or journal, it went largely unnoticed until a 2018 paper by Alan Sherman and colleagues read it as an early design that already held many of the elements of blockchains.

By then Chaum had already published his first major result. In the February 1981 issue of Communications of the ACM, he introduced the mix network in “Untraceable Electronic Mail, Return Addresses, and Digital Pseudonyms” — a scheme for routing encrypted messages through relays that reorder and re-encrypt them, so no observer of the network can link a message’s sender to its recipient.

Chaum organized and presented at the CRYPTO ‘82 conference in Santa Barbara (August 23-25, 1982), where he unveiled “Blind Signatures for Untraceable Payments.” The technique lets a signer certify a message without ever seeing its contents — a bank can authorize a token as genuine without learning which token it authorized, or who will spend it. It is the cryptographic primitive that would let a payment be as untraceable as physical cash while still being verifiable. Chaum patented it the following year. At that same conference he proposed forming a standing research association; it was formed the next year as the International Association for Cryptologic Research (IACR), with Chaum as one of the seven members of its founding organizing committee.

He followed the blind-signature paper with “Security without Identification: Transaction Systems to Make Big Brother Obsolete” in Communications of the ACM (October 1985), and took the idea to general readers in “Achieving Electronic Privacy” in Scientific American (August 1992), whose subtitle put the claim plainly: “A cryptographic invention known as a blind signature permits numbers to serve as electronic cash or to replace conventional identification.” The article began with the file already being kept on its readers: every telephone call, credit-card purchase, magazine subscription and tax payment “goes into a data base somewhere,” and “all these records can be linked so that they constitute in effect a single dossier on your life.” It closed: “The shape of society in the next century may depend on which approach predominates.”

The 1985 paper had made the same case seven years earlier, with the same word. It opens: “The foundation is being laid for a dossier society, in which computers could be used to infer individuals’ life-styles, habits, whereabouts, and associations from data collected in ordinary consumer transactions.” It explained the blind signature with “an analogy to envelopes and carbon paper.” The customer seals a blank slip and a sheet of carbon paper in an envelope; the bank deducts one dollar and signs “worth one dollar” on the outside without opening it; the customer later removes the envelope and carbon, and the slip carries the bank’s signature, although the bank never saw it. Its closing section warned that the architecture of the coming transaction systems “may have a long-term impact on the centralization of our economic system,” and that “The initial choice of direction will gather economic and societal momentum, making reversal increasingly less likely.”

DigiCash and eCash (1990–1998)

In 1988, working with Amos Fiat and Moni Naor, Chaum extended blind signatures into a design for offline electronic cash that did not require a real-time connection to a bank to prevent double-spending. In April 1990 he founded DigiCash in Amsterdam to commercialize the idea, and in May 1994, in his keynote at the first conference on the World Wide Web in Geneva, he demonstrated DigiCash’s software-only electronic cash making payments over email and the Internet, which the company announced as the world’s first electronic cash payment over computer networks.

The Dutch magazine NEXT!, reconstructing the company’s rise and fall after the bankruptcy (January 1999; an English translation circulated that February), traced the founding to a job for Rijkswaterstaat, the Dutch Department of Public Works, which was considering automatic road-toll collection. Chaum, then head of the cryptography department at CWI, gathered a few young researchers, and “within little over a week the job was done.” DigiCash “first saw light of day” on April 21, 1990. Nicholas Negroponte called ecash “the most exciting product I have seen in the past 20 years,” and visitors to its offices in the Amsterdam Science Park found “Real whiz kids who got coffee from the machine with their own electronic gadgets.”

In 1995, Mark Twain Bank in St. Louis became the first bank to issue eCash, DigiCash’s blind-signature-based digital currency, followed by Deutsche Bank the next year.

Bigger deals kept falling through. Visa reportedly offered around $40 million for a stake in the company; ING and ABN Amro discussed partnerships worth tens of millions more; Citibank negotiated seriously and pulled out. The closest DigiCash came to mass distribution was Microsoft: Bill Gates wanted to bundle eCash into Windows 95, reportedly offering on the order of $100 million, but the licensing terms Chaum proposed — a per-copy fee — broke off the talks.

Former employees told NEXT! the same story from the inside. “Paranoid” was the word they kept using. Raymond Stofberg, who ran DigiCash’s finances until August 1996, said of the day an ING investment was to be signed: “He was so paranoid, that he always thought something was wrong.” A week before a deal with the Dutch banks’ I-Pay system, Chaum told a newspaper that their smart-card systems were insecure (“The smartcard is broken”), and ABN Amro killed the deal. When Visa wanted to invest $40 million, “David suddenly demanded 75 million,” Stofberg recalled; Visa’s reply was “Get lost.” What Chaum held to was privacy. In 1996, in a Honeywell Bull magazine, he said: “The difference between a bad electronic cash system and well-developed digital cash will determine whether we will have a dictatorship or a real democracy.”

In March 1996 eleven key employees met and decided to give Chaum a simple choice: “You’re out or we’re out.” He made two of them interim managers, withdrew into the background, and returned to the US a year later. Less than three months after things settled down came an exodus of employees, and an in-joke outlived it: “If you can survive DigiCash, you can handle anything that life throws at you.” By 1998, after eight years in business, DigiCash had signed only a few hundred merchants and a few thousand users. That year the company filed for bankruptcy; its patents and remaining assets were sold off, eventually landing with eCash Technologies before InfoSpace acquired what was left in 2002. NEXT! ended its account with Chaum seen walking around Berkeley: “He was far ahead of his time. Too far.”

The gap DigiCash could not close

DigiCash’s eCash was anonymous the way physical cash is anonymous — the blind signature hid a token’s history from the bank that issued it. But every eCash token still had to be issued and redeemed by a bank. The system removed banks from watching individual transactions; it never removed them from the currency itself. Satoshi’s design took the opposite emphasis: rather than hiding a payment from any single institution, it eliminated the institution’s role in confirming one, using Adam Back’s proof-of-work rather than a bank’s signature to make double-spending costly. Hashcash’s own 1997 announcement placed itself explicitly alongside DigiCash and eCash — then the most developed digital-cash system — as a complement rather than a competitor.

Satoshi named the gap himself only after the release. In January 2009 he counted DigiCash among “more than a decade of failed Trusted Third Party based systems,” and in February he wrote: “That was the Achilles heel of Chaumian systems; when the central company shut down, so did the currency.” What Satoshi knew before the code was done finds no record of Chaum’s work in front of him while he wrote the code.

Significance

Chaum’s later career shows the persistence: after DigiCash’s collapse he kept working on privacy-preserving cryptography from an academic base at CWI in Amsterdam, and starting in 2016 began designing xx network, a blockchain aimed at combining private messaging with post-quantum security, which launched its mainnet in 2021. His graduate students carried his approach forward too — Len Sassaman, later linked to a Satoshi-identity hypothesis in his own right, was Chaum’s PhD advisee at KU Leuven’s COSIC group at the time of his death in 2011. Blind signatures also outlived DigiCash on their own terms: the cryptographic primitive Chaum patented in 1983 is the same one behind modern Chaumian-mint e-cash protocols built on top of Bitcoin’s own Lightning Network.

DigiCash’s failure was not fundamentally a cryptography problem — the blind signature worked exactly as designed. What it couldn’t survive was needing a bank to vouch for a currency it didn’t fully control, on top of the adoption and competitive pressures that sink most payment systems; that dependency on a bank is exactly the kind of single point of failure Bitcoin was built, a decade later, to remove.