Crypto

DigiCash and David Chaum: The First Attempt at Digital Cash

How David Chaum's blind signatures led to DigiCash in 1989, why ecash never reached mass adoption, and what its story still teaches about online payments.

By Zebra Hosting Cloud

Long before Bitcoin, an American cryptographer working in the Netherlands tried to build digital money that worked on the early internet. David Chaum founded DigiCash in 1989 to turn his research into a real payment system. It did not survive, but many of the ideas behind later cryptocurrencies, and the reasons it failed, are worth understanding.

The problem Chaum wanted to solve

By the early 1980s, electronic payments were becoming common, and so was a worry: every card payment leaves a record linking a person, a shop and an amount. Chaum argued that a growing pile of such records could expose a person's habits, associations and movements. He wanted a system where a payment could be verified as genuine without the bank learning who spent the money where.

In 1982 he presented a paper on what he called blind signatures, a technique for getting a bank to sign a digital token without the bank seeing what it was signing. It became the technical core of his later work.

How blind signatures work

The usual analogy is a sealed envelope lined with carbon paper. You put a blank token inside, hand the envelope to the bank, and the bank signs the outside. The signature presses through the carbon onto the token. You then open the envelope and hold a token carrying the bank's valid signature, yet the bank never saw the token itself. When the token is spent, the bank can confirm its own signature is genuine but cannot link it back to the withdrawal.

In practical terms, the system worked in four steps:

  1. A user withdraws digital coins from their bank account, and the bank signs them blindly.
  2. The user pays a merchant by sending those coins.
  3. The merchant passes the coins to the bank to be deposited.
  4. The bank checks its signature and a record of coins already spent, then credits the merchant.

DigiCash and ecash

Chaum founded DigiCash in Amsterdam in 1989, after working at the Centrum Wiskunde & Informatica (CWI) research institute. The company's product was called ecash. It ran as software on a user's computer, a wallet that stored coins and exchanged them with participating banks and shops.

During the mid-1990s several banks ran trials. Mark Twain Bank in the United States began issuing ecash in 1995, which was one of the best-known early deployments. Interest in the web was exploding, and ecash looked like a natural fit for paying small amounts online.

Why it faded

DigiCash filed for bankruptcy in 1998. There was no single cause, and historians of the period point to several overlapping problems:

  • Too few merchants. Shops had little reason to install new software when few customers had ecash, and customers had little reason to use ecash when few shops accepted it.
  • Cautious banks. Banks were slow to commit, and the system needed them as issuers.
  • Strong competition. Credit cards were already established, and card networks were building ways to use them online.
  • Central control. The whole system relied on one issuer checking for double-spending. If the company or a bank failed, the money's value depended on that party.

The company's assets were later bought by another business, but ecash did not return as a mainstream payment method.

Chaum's wider influence

Chaum's contribution was not limited to payments. In 1981 he described mix networks, a way of routing messages through several relays so that the sender and receiver cannot easily be linked. The idea is a distant ancestor of anonymous remailers and of onion routing, which Tor later popularised. In 1982 he also helped found the International Association for Cryptologic Research, which still organises the field's main academic conferences. Much of today's work on private communication builds on these early papers.

DigiCash compared with Bitcoin

QuestionDigiCash ecashBitcoin
Who prevents double-spending?A central issuing bankA distributed network using proof of work
Privacy approachCryptographic blinding of coinsPseudonymous public addresses
Who can issue money?Participating banksDefined by the protocol rules
StatusCompany bankrupt in 1998Running since 2009

The comparison shows why the double-spending problem mattered so much. Chaum solved privacy but still needed a trusted party to record spent coins. Satoshi Nakamoto's 2008 design removed that party, trading some privacy for decentralisation. The two systems answered different halves of the same question.

What the story still teaches

DigiCash is a reminder that good cryptography does not guarantee adoption. Payments are a two-sided market: shops and customers both have to want the same tool at the same time. Many later projects hit the same wall.

Privacy remains a live debate as well, and encrypted connections now protect card details in transit on most shops (see how this works on our SSL page). Chaum's central point, that payment data is personal data, is now reflected in privacy laws and in the way regulated businesses handle customer information.

A practical lesson for site owners

If you take payments online, the lesson from DigiCash is to offer methods your customers will actually use, and to protect the data you collect. Running your site on hosting with free SSL and a clear security setup is a basic part of that. See the Zebra Hosting security page for what is included on our plans.