IETF Logo Mail Archive

Re: [CFRG] Partially blind issuance and proofs on revealed values (and a syntax change)

Orie Steele <orie@transmute.industries> Mon, 08 April 2024 18:19 UTC

Return-Path: <orie@transmute.industries>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70F51C14F6EC for <cfrg@ietfa.amsl.com>; Mon, 8 Apr 2024 11:19:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.075
X-Spam-Level:
X-Spam-Status: No, score=-2.075 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=transmute.industries
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BzCA7TTANJuc for <cfrg@ietfa.amsl.com>; Mon, 8 Apr 2024 11:18:56 -0700 (PDT)
Received: from mail-pf1-x429.google.com (mail-pf1-x429.google.com [IPv6:2607:f8b0:4864:20::429]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 78435C14F61D for <cfrg@irtf.org>; Mon, 8 Apr 2024 11:18:56 -0700 (PDT)
Received: by mail-pf1-x429.google.com with SMTP id d2e1a72fcca58-6ed0e9ccca1so1961265b3a.0 for <cfrg@irtf.org>; Mon, 08 Apr 2024 11:18:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=transmute.industries; s=google; t=1712600336; x=1713205136; darn=irtf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=NpfmSAqb4bO3lt7D3Wdxb70mOk9BOK5+naHEvCpyrNQ=; b=JKmp2b0AIWDkmeiYWeYn0vBf2lXrDctN2Sq3fa8HB8RLZeK2jIfhWOZTckeo1ryt40 u/KENdhrGzxuEl//QWH9JwAkF7oxXDWO27SrpqV11Z8lJ7uz+P2rO6FDL/wL8Wp3Ocqa INT/tWA2Yh9tc8lZQsErjOC7h61P0MUl4eLtt38KkBNmVcYhGUDNfy++f6gGvRTL+Lre eZO2l/umZszi9aVAYUKbCZWYJu/E3G14kPMzEwKuiZmvGiea7nlvggQ50iUWvG/Pvm1J grX1+TNGjOaEinupCOalfDZDeH/6fEUbRCjsxF1YOrQQeaqwd+fUv7Fcpos6QhPHWBUW vHug==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1712600336; x=1713205136; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=NpfmSAqb4bO3lt7D3Wdxb70mOk9BOK5+naHEvCpyrNQ=; b=uQ3NndFGzkytq7h71CcH6eUQwYHIRxcDGC4vMCI1/dDXCYfYBwoK2ytGlR9W6FL1s2 734ZDf2oaV3uJ/ywyAm71+i9EI3VNjDtPuKoFM073vPQCXzvLXbrrVqkBYL/FuIxsjo4 pNiQqPZdembpFY6B54Nous3/TexPek1BEvD2kgEWctmsSsGvclJfF2Jehfn/t9gJKg7H F6kY7r4gsUjTBcMxECaNTVfgFIdz+/nHhUd2i1ojK4hBNQTzhfd3G84wfQ9v88NM9/sW Tm3gmqnhTJ5Vo8aXl6JD/O5NeRw7c79N4XvvnXiIqe22IPrpArEU4FDWGZHCzvbRHt/6 T/ww==
X-Gm-Message-State: AOJu0YxorbcQYH7g5IVjsWKBke/6Pb3xo1+rFwCFA3IgAtyuSJTDt4x5 88mzVsKlqOU7gWGUwpAyRIntQcOZuLxKmDOfwIfUZiPfiSET9wX7sDeXeHnLqA2Aer8CwQnSSi0 GWvP/7jo6AcCQw/T3JwWooHH2urIUASrokKYCNQ==
X-Google-Smtp-Source: AGHT+IFzw7a83OdmL3xNaICijFEmPPAi23G/7OVWn+xlZsfYYZ+CZgR8N5/3k9OTDhA1VWwME4YCzpV+LQ5GsZ/8KeY=
X-Received: by 2002:a05:6a20:d708:b0:1a7:52e0:5773 with SMTP id iz8-20020a056a20d70800b001a752e05773mr5614871pzb.18.1712600335864; Mon, 08 Apr 2024 11:18:55 -0700 (PDT)
MIME-Version: 1.0
References: <CACsn0cnQF7zO=KnYFcXpNL5ibkzkaE7KdYv5341Q7yoPERoatQ@mail.gmail.com>
In-Reply-To: <CACsn0cnQF7zO=KnYFcXpNL5ibkzkaE7KdYv5341Q7yoPERoatQ@mail.gmail.com>
From: Orie Steele <orie@transmute.industries>
Date: Mon, 08 Apr 2024 13:18:44 -0500
Message-ID: <CAN8C-_LEUZM7y_C=cLbJA+tjAOsBPU7EFvLjMtw0kSX_Oq35LA@mail.gmail.com>
To: Watson Ladd <watsonbladd@gmail.com>
Cc: CFRG <cfrg@irtf.org>
Content-Type: multipart/alternative; boundary="000000000000a97411061599d6a7"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/taG-k2JV9wtcVfuW0X_wCm61SzM>
Subject: Re: [CFRG] Partially blind issuance and proofs on revealed values (and a syntax change)
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://mailman.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://mailman.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Apr 2024 18:19:00 -0000

Your second comment appears to be follow up to
https://mailarchive.ietf.org/arch/msg/cfrg/QnAzetPq5KUzbl0QTUDMmJfVQpE/

Your first comment seems like possibly a significant change to:

https://datatracker.ietf.org/doc/draft-irtf-cfrg-bbs-signatures/

Or perhaps:
https://datatracker.ietf.org/doc/draft-vasilis-bbs-per-verifier-linkability/
?

Is there a link to the privacy pass context / discussion?

I see https://datatracker.ietf.org/doc/draft-ladd-privacypass-bbs/

Is that the right document to review, in order to better understand your
first comment?

Regards,

OS

On Mon, Apr 8, 2024 at 1:01 PM Watson Ladd <watsonbladd@gmail.com> wrote:

> Dear CFRG,
>
> In the course of working on BBS for privacy pass we've come up with
> two additional features and a small tweak that I think are worth
> discussing here.
>
> The first change is we'd like partially blind issuance: there should
> be an attribute where the signer doesn't know the value. This can be
> done through the fully blind issuance protocol, with a proof of
> correct representation for the hidden value.
>
> The second change is doing proofs over messages. We'd like to be able
> to show statements involving discrete logarithms in G1 where the
> witness is one of the messages. This enables things like PRF
> evaluations for rate limiting.
>
> The syntax change is to have generators be hashes of key names, so
> that we can have names not numbers for attributes. This just makes
> life easier.
>
> Sincerely,
> Watson Ladd
>
> --
> Astra mortemque praestare gradatim
>
> _______________________________________________
> CFRG mailing list
> CFRG@irtf.org
> https://mailman.irtf.org/mailman/listinfo/cfrg
>


-- 


ORIE STEELE
Chief Technology Officer
www.transmute.industries

<https://transmute.industries>

v2.23.0 | Report a Bug | By Email