Cryptology ePrint Archive: Report 2022/213

Issuer-Hiding Attribute-Based Credentials

Jan Bobolz and Fabian Eidens and Stephan Krenn and Sebastian Ramacher and Kai Samelin

Abstract: Attribute-based credential systems enable users to authenticate in a privacy-preserving manner. However, in such schemes verifying a user's credential requires knowledge of the issuer's public key, which by itself might already reveal private information about the user.

In this paper, we tackle this problem by introducing the notion of issuer-hiding attribute-based credential systems. In such a system, the verifier can define a set of acceptable issuers in an ad-hoc manner, and the user can then prove that her credential was issued by one of the accepted issuers -- without revealing which one.

We then provide a generic construction, as well as a concrete instantiation based on Groth's structure preserving signature scheme (ASIACRYPT'15) and simulation-sound extractable NIZK, for which we also provide concrete benchmarks in order to prove its practicability.

The online complexity of all constructions is independent of the number of acceptable verifiers, which makes it also suitable for highly federated scenarios.

Category / Keywords: cryptographic protocols / cryptographic protocols, issuer-hiding, privacy-preserving, anonymous credentials, authentication

Original Publication (with minor differences): CANS 2021

Date: received 21 Feb 2022

Contact author: jan bobolz at uni-paderborn de, fabian eidens at uni-paderborn de, stephan krenn at ait ac at

Available format(s): PDF | BibTeX Citation

Version: 20220225:074013 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]