Paper 2022/1536

Privacy-Preserving Blueprints

Markulf Kohlweiss, University of Edinburgh
Anna Lysyanskaya, Brown University
An Nguyen, Brown University

In a world where everyone uses anonymous credentials for all access control needs, it is impossible to trace wrongdoers, by design. This makes legitimate controls, such as tracing illicit trade and terror suspects, impossible to carry out. Here, we propose a privacy-preserving blueprint capability that allows an auditor to publish an encoding $pk_A$ of the function $f(x,\cdot)$ for a publicly known function $f$ and a secret input $x$. For example, $x$ may be a secret watchlist, and $f(x,y)$ may return $y$ if $y\in x$. On input her data $y$ and the auditor's $pk_A$, a user can compute an escrow $Z$ such that anyone can verify that $Z$ was computed correctly from the user's credential attributes, and moreover, the auditor can recover $f(x,y)$ from $Z$. Our contributions are: * We define secure $f$-blueprint systems; our definition is designed to provide a modular extension to anonymous credential systems. * We show that secure $f$-blueprint systems can be constructed for all functions $f$ from fully homomorphic encryption and NIZK proof systems. This result is of theoretical interest but is not efficient enough for practical use. * We realize an optimal blueprint system under the DDH assumption in the random-oracle model for the watchlist function.

Available format(s)
Cryptographic protocols
Publication info
Anonymous credentials privacy-preserving protocols
Contact author(s)
markulf kohlweiss @ ed ac uk
anna_lysyanskaya @ brown edu
an_q_nguyen @ brown edu
2022-11-07: approved
2022-11-06: received
See all versions
Short URL
Creative Commons Attribution


      author = {Markulf Kohlweiss and Anna Lysyanskaya and An Nguyen},
      title = {Privacy-Preserving Blueprints},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1536},
      year = {2022},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.