Re: [MLS] About Verifiable Credentials in MLS

Hi David,

Thanks for letting the group know about this.  Personally, I would be
interested to hear more.

A couple of related things that might be of interest to you:

1. With regard to zero-knowledge: The IETF OAuth working group is working
on VCs formatted as "selective disclosure" JWTs, which would allow a
participant to disclose certain attributes but not others.  It's not
zero-knowledge, obviously, but it has some similar privacy objectives.

https://datatracker.ietf.org/doc/draft-ietf-oauth-sd-jwt-vc/

2. MLSpp has implemented the UserInfoVCCredential and MultiCredential
schemes from the "additional credentials" draft.

https://datatracker.ietf.org/doc/draft-barnes-mls-addl-creds/
https://github.com/cisco/mlspp/blob/main/include/mls/credential.h#L61
https://github.com/cisco/mlspp/blob/main/include/mls/credential.h#L125

Best,
--Richard

On Fri, Jan 19, 2024 at 1:39 AM David Soler García <david.soler=
40udc.es@dmarc.ietf.org> wrote:

> Hi. I'm David Soler. I'm a PhD student and my thesis is oriented to
> implementing MLS in a decentralised setting. I started a few months ago.
>
> I recently subscribed to the MLS mailing list and today I received that in
> the next meeting in January 25th the topic of adding new credential
> types, including Verifiable Credentials, will be addresed.
>
> I actually have been working in that topic: I have devised a
> "Attribute-Based MLS" in which groups publish a set of attributes (such as
> age or possession of a university degree) they require for participating in
> the group. Thus, the subject of authentication is not the Clients'
> identity, but the attributes they possess. Users with valid VCs can access
> the MLS group through External Joins. I have also developed a PoC
> implementation in OpenMLS. Though it is not developed yet, my plan is to
> include zero-knowledge proofs (ZKP) to increase the level of privacy.
>
> If you think my work could be of interest to you, please let me know.
>
> Kind regards.
>
>
> __________________________________________________________________________________________
>
> David Soler García
>
> LIA[2] - Departamento de Ciencias da Computación e Tecnoloxías da
> Información
>
> Universidade da Coruña
>
> Tfno. (+34) 981 167 000 Ext. 1264
> _______________________________________________
> MLS mailing list
> MLS@ietf.org
> https://www.ietf.org/mailman/listinfo/mls
>