Cryptology ePrint Archive: Report 2016/581

UC Commitments for Modular Protocol Design and Applications to Revocation and Attribute Tokens

Jan Camenisch and Maria Dubovitskaya and Alfredo Rial

Abstract: Complex cryptographic protocols are often designed from simple cryptographic primitives, such as signature schemes, encryption schemes, verifiable random functions, and zero-knowledge proofs, by bridging between them with commitments to some of their inputs and outputs. Unfortunately, the known universally composable (UC) functionalities for commitments and the cryptographic primitives mentioned above do not allow such constructions of higher-level protocols as hybrid protocols. Therefore, protocol designers typically resort to primitives with property-based definitions, often resulting in complex monolithic security proofs that are prone to mistakes and hard to verify.

We address this gap by presenting a UC functionality for non-interactive commitments that enables modular constructions of complex protocols within the UC framework. We also show how the new functionality can be used to construct hybrid protocols that combine different UC functionalities and use commitments to ensure that the same inputs are provided to different functionalities.

We further provide UC functionalities for attribute tokens and revocation that can be used as building blocks together with our UC commitments. As an example of building a complex system from these new UC building blocks, we provide a construction (a hybrid protocol) of anonymous attribute tokens with revocation. Unlike existing accumulator-based schemes, our scheme allows one to accumulate several revocation lists into a single commitment value and to hide the revocation status of a user from other users and verifiers.

Category / Keywords: universal composability, commitments, attribute tokens, revocation, vector commitments

Original Publication (in the same form): IACR-Crypto-2016

Date: received 3 Jun 2016

Contact author: jca at zurich ibm com, mdu at zurich ibm com, alfredo_rial at hotmail com

Available format(s): PDF | BibTeX Citation

Version: 20160606:150011 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]