Abstract:Today, digital identity management for individuals is either inconvenient and error-prone or creates undesirable lock-in effects and violates privacy and security expectations. These shortcomings inhibit the digital transformation in general and seem particularly concerning in the context of novel applications such as access control for decentralized autonomous organizations and identification in the Metaverse. Decentralized or self-sovereign identity (SSI) aims to offer a solution to this dilemma by empowering individuals to manage their digital identity through machine-verifiable attestations stored in a "digital wallet" application on their edge devices. However, when presented to a relying party, these attestations typically reveal more attributes than required and allow tracking end users' activities. Several academic works and practical solutions exist to reduce or avoid such excessive information disclosure, from simple selective disclosure to data-minimizing anonymous credentials based on zero-knowledge proofs (ZKPs). We first demonstrate that the SSI solutions that are currently built with anonymous credentials still lack essential features such as scalable revocation, certificate chaining, and integration with secure elements. We then argue that general-purpose ZKPs in the form of zk-SNARKs can appropriately address these pressing challenges. We describe our implementation and conduct performance tests on different edge devices to illustrate that the performance of zk-SNARK-based anonymous credentials is already practical. We also discuss further advantages that general-purpose ZKPs can easily provide for digital wallets, for instance, to create "designated verifier presentations" that facilitate new design options for digital identity infrastructures that previously were not accessible because of the threat of man-in-the-middle attacks.

Study of Zero-Knowledge protocols and Elliptic Curve Cryptography and their implementation in Smart Card environments using Java Card

Implementation and Security Test of Zero-Knowledge Protocols on SSI Blockchain

An Elliptic Curve Dynamic Identity Authentication Scheme Based on Smart Cards

Application of Java Card in Development of Smart Cart

ZKPs: Does This Make The Cut? Recent Advances and Success of Zero-Knowledge Security Protocols

Lightweight Zero-Knowledge Proofs for Crypto-Computing Protocols.

Practical zero-knowledge arguments from ∑-protocols

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

Preprocessing scheme for improving Schnorr signature in JavaCard

Resettable Zero-Knowledge In The Weak Public-Key Model

Practical Zero-Knowledge Arguments from Σ-Protocols

Lightweight Certificateless Two-Factor Authentication Protocol Using Smart Cards

A Survey on the Applications of Zero-Knowledge Proofs

Concurrent/Resettable Zero-Knowledge with Concurrent Soundness in the Bare Public-Key Model and Its Applications.

The New Development of Smart Card An Overview to JavaCard

Security Analysis and Improvement of A Zero-knowledge Proof Identification Scheme

Bringing data minimization to digital wallets at scale with general-purpose zero-knowledge proofs

Evaluation and Analysis of Standard Security Technology in V2X Communication -- Exploring ECQV Implicit Certificate Cracking

An interactive zero-knowledge proof based protocol of identification and digital signature

Chaotic maps-based three-party authenticated key agreement protocol using smart cards

Provable Secure and Efficient Digital Rights Management Authentication Scheme Using Smart Card Based on Elliptic Curve Cryptography