[Privacy-pass] Re: Demo of the BBS approach to rate limiting

[Watson Ladd <[e-mail]>]

That is correct! Michele Orru came up with the idea and has a draft paper
showing correctness assuming certain conditions on the form of the proving
matrix: all mistakes in interpretation are mine.

On Fri, Jul 5, 2024 at 10:56 AM Thibault Meunier <[e-mail]>
wrote:

> Hi Watson,
>
> Thanks for putting this together! I confirm the demo works locally with go
> 1.22 and go test ./token.
>
> To confirm: this demo is a first pass at implementing the scheme presented
> in a previous conversation [1], which would help inform
> draft-ladd-bbs-privacypass [2]?
>
> [1]
> https://mailarchive.ietf.org/arch/msg/privacy-pass/dja8_CKzxxXpgnx9J1LA-PXCPLs/
> [2] https://datatracker.ietf.org/doc/draft-ladd-privacypass-bbs/
>
> Thibault
>
>
> On Wednesday, July 3rd, 2024 at 8:29 PM, Watson Ladd <
> [e-mail]> wrote:
>
> >
> >
> > Hello Privacy Pass and others,
> >
> > After the past few days I've gotten https://github.com/wbl/bbs-demo to
> > the point where it works and shows the line of thinking. There's a lot
> > that isn't great about it: the security analysis requires looking at
> > the structure of the matrices more closely, the range proof is
> > primitive (but easy to understand), there's many obvious speedups with
> > sparse public matrices of elements and multiplication, issuance is not
> > fully fleshed out yet, but I think its worth showing off before I go
> > attack those.
> >
> > The test in
> https://github.com/wbl/bbs-demo/blob/master/token/token_test.go#L19
> > should give an idea of the API+the declarations in token. A real
> > origin would need to handle ticket checking, a real client needs to
> > keep the count, etc.
> >
> > Sincerely,
> > Watson Ladd
> >
> > --
> > Astra mortemque praestare gradatim
> >
> > --
> > Privacy-pass mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
>


-- 
Astra mortemque praestare gradatim