Shielded Bitcoin: private payments on Bitcoin without a soft fork?

A new research proposal borrows Zcash's design to hide amounts and counterparties on Bitcoin as it is today. What it promises, what it costs, and what is still missing. Presented at three conferences this autumn.