by Dan Ariely
This was Crypto 2011, and the list of attendees included representatives from the National Security Agency, the US military, and an assortment of foreign governments. Cryptographers are little known outside this hermetic community, but our digital safety depends on them. They write the algorithms that conceal bank files, military plans, and your e-mail.
I approached Phillip Rogaway, the conference’s program chair. He is a friendly, diminutive man who is a professor of cryptography at the University of California at Davis and who has also taught at Chiang Mai University in Thailand. He bowed when he shook my hand, and I explained that I was trying to learn more about what it would take to create bitcoin. “The people who know how to do that are here,” Rogaway said. “It’s likely I either know the person or know their work.” He offered to introduce me to some of the attendees.
Nakamoto had good reason to hide: people who experiment with currency tend to end up in trouble. In 1998 a Hawaiian resident named Bernard von NotHaus began fabricating silver and gold coins that he dubbed Liberty Dollars. Nine years later, the US government charged NotHaus with “conspiracy against the United States.” He was found guilty and is awaiting sentencing. “It is a violation of federal law for individuals . . . to create private coin or currency systems to compete with the official coinage and currency of the United States,” the FBI announced at the end of the trial.
Online currencies aren’t exempt. In 2007 the federal government filed charges against e-Gold, a company that sold a digital currency redeemable for gold. The government argued that the project enabled money laundering and child pornography, since users did not have to provide thorough identification. The company’s owners were found guilty of operating an unlicensed money-transmitting business, and the CEO was sentenced to months of house arrest. The company was effectively shut down.
Nakamoto seemed to be doing the same things as these other currency developers who ran afoul of authorities. He was competing with the dollar, and he ensured the anonymity of users, which made bitcoin attractive for criminals. This winter a web site was launched called Silk Road, which allowed users to buy and sell heroin, LSD, and marijuana as long as they paid in bitcoin.
Still, Lewis Solomon, a professor emeritus at George Washington University Law School, who has written about alternative currencies, argues that creating bitcoin might be legal. “Bitcoin is in a gray area, in part because we don’t know whether it should be treated as a currency, a commodity like gold, or possibly even a security,” he says.
Gray areas, however, are dangerous, which may be why Nakamoto constructed bitcoin in secret. It may also explain why he built the code with the same peer-to-peer technology that facilitates the exchange of pirated movies and music: users connect with each other instead of with a central server. There is no company in control, no office to raid, and nobody to arrest.
Today bitcoins can be used online to purchase beef jerky and socks made from alpaca wool. Some computer retailers accept them, and you can use them to buy falafel from a restaurant in Hell’s Kitchen. In late August, I learned that bitcoins could also get me a room at a Howard Johnson hotel in Fullerton, California, ten minutes from Disneyland. I booked a reservation for my four-year-old daughter and me and received an e-mail from the hotel requesting a payment of 10.305 bitcoins.
By this time, it would have been pointless for me to play the bitcoin lottery, which is set up so that the difficulty of winning increases the more people play it. When bitcoin launched, my laptop would have had a reasonable chance of winning from time to time. Now, however, the computing power dedicated to playing the bitcoin lottery exceeds that of the world’s most powerful supercomputer. So I set up an account with Mt. Gox, the leading bitcoin exchange, and transferred $120. A few days later, I bought 10.305 bitcoins with the press of a button and just as easily sent them to the Howard Johnson.
It was a simple transaction that masked a complex calculus. In 1971 Richard Nixon announced that US dollars could no longer be redeemed for gold. Ever since, the value of the dollar has been based on our faith in it. We trust that dollars will be valuable tomorrow, so we accept payment in dollars today. Bitcoin is similar: you have to trust that the system won’t get hacked and that Nakamoto won’t suddenly emerge to somehow plunder it all. Once you believe in it, the actual cost of a bitcoin—five dollars or thirty?—depends on factors such as how many merchants are using it, how many might use it in the future, and whether or not governments ban it.
My daughter and I arrived at the Howard Johnson on a hot Friday afternoon and were met in the lobby by Jefferson Kim, the hotel’s cherubic twenty-eight-year-old general manager. “You’re the first person who’s ever paid in bitcoin,” he said, shaking my hand enthusiastically.
Kim explained that he had started mining bitcoins two months earlier. He liked that the currency was governed by a set of logical rules, rather than the mysterious machinations of the Federal Reserve. A dollar today, he pointed out, buys you what a nickel bought a century ago, largely because so much money has been printed. And, he asked, why trust a currency backed by a government that is $14 trillion in debt?
Kim had also figured that bitcoin mining would be a way to make up the $1,200 he’d spent on a high-performance gaming computer. So far, he’d made only $400, but it was fun to be a pioneer. He wanted bitcoin to succeed, and in order for that to happen, businesses needed to start accepting it.
The truth is that most people don’t spend the bitcoins they buy; they hoard them, hoping that they will appreciate. Businesses are afraid to accept them, because they’re new and weird—and because the value can fluctuate wildly. (Kim immediately exchanged the bitcoins I sent him for dollars to avoid just that risk.) Still, the currency is young and has several attributes that appeal to merchants. Robert Schwarz, the owner of a computer-repair business in Klamath Falls, Oregon, began selling computers for bitcoin to sidestep steep credit card fees, which he estimates cost him 3 percent on every transaction. “One bank called me saying they had the lowest fees,” Schwarz said. “I said, ‘No, you don’t. Bitcoin does.’” Because bitcoin transfers can’t be reversed, merchants also don’t have to deal with credit card charge-backs from dissatisfied customers. Like cash, it’s gone once you part with it.
At the Howard Johnson, Kim led us to the check-in counter. The lobby featured imitation-crystal chandeliers, ornately framed oil paintings of Venice, and, inexplicably, a pair of faux elephant tusks painted gold. Kim explained that he hadn’t told his mother, who owned the place, that her hotel was accepting bitcoins: “It would be too hard to explain what a bitcoin is.” He said he had activated the tracking program on his mother’s Droid, and she was currently about six miles away. Today, at least, there was no danger of her finding out about her hotel’s financial innovation. The receptionist handed me a room card, and Kim shook my hand. “So just enjoy your stay,” he said.
Nakamoto’s extensive online postings have some distinctive characteristics. First of all, there is the flawless English. Over the course of two years, he dashed off about 80,000 words—the approximate length of a novel—and made only a few typos. He covered topics ranging from the theories of the Austrian economist Ludwig von Mises to the history of commodity markets. Perhaps most interestingly, when he created the first fifty bitcoins, now known as the “genesis block,” he permanently embedded a brief line of text into the data: “The Times 03/Jan/2009 Chancellor on brink of second bailout for banks.”
This is a reference to a Times of London article indicating that the British government had failed to stimulate the economy. Nakamoto appeared to be saying that it was time to try something new. The text, hidden amid a jumble of code, was a sort of digital battle cry. It also indicated that Nakamoto read a British newspaper. He used British spelling (“favour,” “colour,” “grey,” “modernised”) and at one point described something as being “bloody hard.” An apartment was a “flat,” math was “maths,” and his comments tended to appear after normal business hours ended in t
he United Kingdom. In an initial post announcing bitcoin, he employed American-style spelling. But after that a British style appeared to flow naturally.
I had this in mind when I started to attend the lectures at the Crypto 2011 conference, including ones with titles such as “Leftover Hash Lemma, Revisited” and “Time-Lock Puzzles in the Random Oracle Model.” In the back of a darkened auditorium, I stared at the attendee list. A Frenchman onstage was talking about testing the security of encryption systems. The most effective method, he said, is to attack the system and see if it fails. I ran my finger past dozens of names and addresses, circling residents of the United Kingdom and Ireland. There were nine.
I soon discovered that six were from the University of Bristol, and they were all together at one of the conference’s cocktail parties. They were happy to chat but entirely dismissive of bitcoin, and none had worked with peer-to-peer technology. “It’s not at all interesting to us,” one of them said. The two other cryptographers from Britain had no history with large software projects. Then I started looking into a man named Michael Clear.
Clear was a young graduate student in cryptography at Trinity College in Dublin. Many of the other research students at Trinity posted profile pictures and phone numbers, but Clear’s page just had an e-mail address. A web search turned up three interesting details. In 2008 Clear was named the top computer-science undergraduate at Trinity. The next year, he was hired by Allied Irish Banks to improve its currency-trading software, and he coauthored an academic paper on peer-to-peer technology. The paper employed British spelling. Clear was well versed in economics, cryptography, and peer-to-peer networks.
I e-mailed him, and we agreed to meet the next morning on the steps outside the lecture hall. Shortly after the appointed time, a long-haired, square-jawed young man in a beige sweater walked up to me, looking like an early-Zeppelin Robert Plant. With a pronounced brogue, he introduced himself. “I like to keep a low profile,” he said. “I’m curious to know how you found me.”
I told him I had read about his work for Allied Irish, as well as his paper on peer-to-peer technology, and was interested because I was researching bitcoin. I said that his work gave him a unique insight into the subject. He was wearing rectangular Armani glasses and squinted so much I couldn’t see his eyes.
“My area of focus right now is fully homomorphic encryption,” he said. “I haven’t been following bitcoin lately.”
He responded calmly to my questions. He was twenty-three years old and studied theoretical cryptography by himself in Dublin—there weren’t any other cryptographers at Trinity. But he had been programming computers since he was ten, and he could code in a variety of languages, including C++, the language of bitcoin. Given that he was working in the banking industry during tumultuous times, I asked how he felt about the ongoing economic crisis. “It could have been averted,” he said flatly.
He didn’t want to say whether or not the new currency could prevent future banking crises. “It needs to prove itself,” he said. “But it’s an intriguing idea.”
I told him I had been looking for Nakamoto and thought that he might be here at the Crypto 2011 conference. He said nothing. Finally I asked, “Are you Satoshi?”
He laughed but didn’t respond. There was an awkward silence.
“If you’d like, I’d be happy to review the design for you,” he offered instead. “I could let you know what I think.”
“Sure,” I said hesitantly. “Do you need me to send you a link to the code?”
“I think I can find it,” he said.
Soon after I met Clear, I traveled to Glasgow, Kentucky, to see what bitcoin mining looked like. As I drove into the town of 14,000, I passed shuttered factories and a central square lined with empty storefronts. On Howdy 106.5, a local radio station, a man tried to sell his bed, his television, and his basset hound—all for $110.
I had come to visit Kevin Groce, a forty-two-year-old bitcoin miner. His uncles had a garbage-hauling business and had let him set up his operation at their facility. The dirt parking lot was jammed with garbage trucks, which reeked in the summer sun.
“I like to call it the new moonshining,” Groce said in a smooth Kentucky drawl, as he led me into a darkened room. One wall was lined with four-foot-tall homemade computers with blinking green and red lights. The processors inside were working so hard that their temperature had risen to 170 degrees, and heat radiated into the room. Each system was a jumble of wires and hacked-together parts, with a fan from Walmart duct-taped to the top. Groce had built them three months earlier, for $4,000. Ever since, they had generated a steady flow of bitcoins, which Groce exchanged for dollars, averaging about $1,000 per month so far. He figured his investment was going to pay off.
Groce was wiry, with wisps of gray in his hair, and he split his time between working on his dad’s farm, repairing laptops at a local computer store, and mining bitcoin. Groce’s father didn’t understand Kevin’s enthusiasm for the new currency and expected him to take over the farm. “If it’s not attached to a cow, my dad doesn’t think much of it,” Groce said.
Groce was engaged to be married, and he planned to use some of his bitcoin earnings to pay for a wedding in Las Vegas later in the year. He had tried to explain to his fiancée how they could afford it, but she doubted the financial prudence of filling a room with bitcoin-mining rigs. “She gets to cussing every time we talk about it,” Groce confided. Still, he was proud of the powerful computing center he had constructed. The machines ran nonstop, and he could control them remotely from his iPhone. The arrangement allowed him to cut tobacco with his father and monitor his bitcoin operation at the same time.
Nakamoto knew that competition for bitcoins would eventually lead people to build these kinds of powerful computing clusters. Rather than let that effort go to waste, he designed software that uses the processing power of the lottery players to confirm and verify transactions. As people like Groce try to win bitcoins, their computers are harnessed to analyze transactions and ensure that no one spends money twice. In other words, Groce’s backwoods operation functioned as a kind of bank.
Groce, however, didn’t look like a guy Wells Fargo would hire. He liked to stay up late at the garbage-hauling center and thrash through Black Sabbath tunes on his guitar. He gave all his computers pet names, like Topper and the Dazzler, and between guitar solos, he tended to them as if they were prize animals. “I grew up milking cows,” Groce said. “Now I’m just milking these things.”
A week after the Crypto 2011 conference, I received an e-mail from Clear. He said that he would send me his thoughts on bitcoin in a day. He added, “I also think I can identify Satoshi.”
The next morning, Clear sent a lengthy e-mail. “It is apparent that the person(s) behind the Satoshi name accumulated a not insignificant knowledge of applied cryptography,” he wrote, adding that the design was “elegant” and required “considerable effort and dedication, and programming proficiency.” But Clear also described some of bitcoin’s weaknesses. He pointed out that users were expected to download their own encryption software to secure their virtual wallets. Clear felt that the bitcoin software should automatically provide such security. He also worried about the system’s ability to grow and the fact that early adopters received an outsized share of bitcoins.
“As far as the identity of the author, it would be unfair to publish an identity when the person or persons has/have taken major steps to remain anonymous,” he wrote. “But you may wish to talk to a certain individual who matches the profile of the author on many levels.”
He then gave me a name.
For a few seconds, all I could hear on the other end of the line was laughter. “I would love to say that I’m Satoshi, because bitcoin is very clever,” Vili Lehdonvirta said finally. “But it’s not me.”
Lehdonvirta is a thirty-one-year-old Finnish researcher at the Helsinki Institute for Information Technology. Clear had discovered that Lehdonvirta used to be a video-game programmer a
nd now studies virtual currencies. Clear suggested that he was a solid fit for Nakamoto.
Lehdonvirta, however, pointed out that he has no background in cryptography and limited C++ programming skills. “You need to be a crypto expert to build something as sophisticated as bitcoin,” Lehdonvirta said. “There aren’t many of those people, and I’m definitely not one of them.”
Still, Lehdonvirta had researched bitcoin and worried about it. “The only people who need cash in large denominations right now are criminals,” he said, pointing out that cash is hard to move around and store. Bitcoin removes those obstacles while preserving the anonymity of cash. Lehdonvirta is on the advisory board of Electronic Frontier Finland, an organization that advocates for online privacy, among other things. Nonetheless, he believes that bitcoin takes privacy too far. “Only anarchists want absolute, unbreakable financial privacy,” he said. “We need to have a back door so that law enforcement can intercede.”
But Lehdonvirta admitted that it’s hard to stop new technology, particularly when it has a compelling story. And part of what attracts people to bitcoin, he said, is the mystery of Nakamoto’s true identity. “Having a mythical background is an excellent marketing trick,” Lehdonvirta said.
A few days later, I spoke with Clear again. “Did you find Satoshi?” he asked cheerfully.
I told him that Lehdonvirta had made a convincing denial and that every other lead I’d been working on had gone nowhere. I then took one more opportunity to question him and to explain all the reasons that I suspected his involvement. Clear responded that his work for Allied Irish Banks was brief and of “no importance.” He admitted that he was a good programmer, understood cryptography, and appreciated the bitcoin design. But, he said, economics had never been a particular interest of his. “I’m not Satoshi,” Clear said. “But even if I was I wouldn’t tell you.”