https://bitcointalk.org/index.php?topic=770.msg8637#msg8637

Satoshi's view about zero-knowledge-proofs for Bitcoin