Zero-knowledge proofs that hide the sender, receiver, and amount of a Bitcoin transfer, with no soft fork, no custodians, and no bridges