Record link: 
http://hdl.handle.net/20.500.12708/228561
-
Title: 
Issuer Hiding for BBS-Based Anonymous Credentials
en
Citation: 
Katz, J., & Sefranek, M. (2026). Issuer Hiding for BBS-Based Anonymous Credentials. In S. Bai & E. Persichetti (Eds.), Public-Key Cryptography – PKC 2026 : 29th IACR International Conference on Practice and Theory of Public-Key Cryptography, West Palm Beach, FL, USA, May 25–28, 2026, Proceedings, Part III (pp. 437–465). Springer. https://doi.org/10.1007/978-3-032-26737-5_14
-
Publisher DOI: 
10.1007/978-3-032-26737-5_14
-
Publication Type: 
Inproceedings - Full-Paper Contribution
en
Language: 
English
-
Authors: 
Katz, Jonathan 
Sefranek, Marek 
-
Organisational Unit: 
E192-06 - Forschungsbereich Security and Privacy 
-
Published in: 
Public-Key Cryptography – PKC 2026 : 29th IACR International Conference on Practice and Theory of Public-Key Cryptography, West Palm Beach, FL, USA, May 25–28, 2026, Proceedings, Part III 
-
ISBN: 
978-3-032-26737-5
-
Volume: 
16553
-
DOI of the book: 
10.1007/978-3-032-26737-5
-
Date (published): 
21-May-2026
-
Event name: 
29th IACR International Conference on Practice and Theory of Public-Key Cryptography 
en
Event date: 
25-May-2026 - 28-May-2026
-
Event place: 
West Palm Beach, FL, United States of America (the)
-
Number of Pages: 
29
-
Publisher: 
Springer, Cham
-
Keywords: 
BBS signatures; anonymous credentials; standardization
en
Abstract: 
Anonymous-credential schemes allow users to obtain credentials on various attributes, and then use those credentials to give unlinkable proofs about the values of some attributes without leaking anything about others. They have recently received interest from companies including Google, Apple, and Cloudflare, and are being actively evaluated both at the IETF and in the EU. Anonymous credentials based on BBS signatures are a leading candidate for standardization. In some natural applications of anonymous credentials, it is beneficial to hide even the issuer of a credential, beyond revealing the fact that the issuer is in some pre-determined set specified by a verifier. Sanders and Traoré recently showed a construction of such issuer-hiding anonymous credentials based on the Pointcheval–Sanders signature scheme. In this work we show how to achieve issuer hiding for BBS-based anonymous credentials. Our construction satisfies a notion of everlasting issuer-hiding anonymity, and is unforgeable in the generic group model. It can be integrated into existing standards, and has several efficiency advantages compared to prior work.
en
Project title: 
Cryptographic Foundations of Privacy in Distributed Ledgers: Projektnummer VRG18-002 (WWTF Wiener Wissenschafts-, Forschu und Technologiefonds) 
Semantische und kryptografische Grundlagen von Informationssicherheit und Datenschutz durch modulares Design: F 8500 (FWF - Österr. Wissenschaftsfonds) 
-
Research Areas: 
Logic and Computation: 100%
-
Science Branch: 
1020 - Informatik: 80%
1010 - Mathematik: 20%
-
Appears in Collections:
Conference Paper

Show full item record

Page view(s)

8
checked on Jun 9, 2026

Google ScholarTM

Check