Abstract:In recent years, the rapid development of blockchain-based applications, such as cryptocurrencies, has raised concerns about privacy preservation within the blockchain community. One widely adopted technique for privacy preservation is the use of Stealth Address, which serves as a crucial component of Monero’s Ring Confidential Transaction (RingCT) protocol. Liu et al. (EuroS &P’19) introduced and formalized a new signature variant called the Key-Insulated and Privacy-Preserving Signature Scheme with Publicly Derived Public Key (PDPKS), and gave a systematically definition on the Stealth Address in both syntax and security definition. This signature variant goes beyond defining the necessary functionality but also capturing safety and privacy requirements, by introducing two game-based security definitions respectively. Rather than in a standalone mode, PDPKS protocol is typically executed alongside other secure components within a complex blockchain system to achieve various security objectives. However, achieving security of a comprehensive system requires additional analysis on the entire system, considering mutual impacts among protocols. Hence, it is crucial to introduce a unified and systematic definition that can describe the security in a universally composable (UC) manner. This paper focuses on formalizing the security of PDPKS in the UC framework, which provides a stronger security definition and ensures that the protocol can be designed and analyzed modularly, so that any specific constructions that satisfy the security requirements defined in the proposed UC model can be securely used as building blocks in complex blockchain systems, without any security concerns. To have a concrete construction that satisfies the UC-security proposed in this paper, we conducted an analysis of the conventional game-based security definitions put forth by Liu et al., and proved that the equivalence between the UC-security of PDPKS and the simultaneous satisfaction of the two game-based security definitions. As a result, this implies that the construction proposed by Liu et al. is a UC-secure PDPKS construction. Besides, the proved equivalence also contributes to a general framework wherein any PDPKS construction that satisfies Liu et al.’s security definition will also satisfies UC-security. This framework enables the use of these PDPKS constructions as secure building blocks in the design and implementation of UC-secure blockchain systems.

Beyond selective disclosure: Extending distributed p-ABC implementations by commit-and-prove techniques

To pass or not to pass: Privacy-preserving physical access control

On Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials

A General Formal Framework of Analyzing Selective Disclosure Attribute-Based Credential Systems.

SD-BLS: Privacy Preserving Selective Disclosure of Verifiable Credentials with Unlinkable Threshold Revocation

Publicly Auditable Conditional Blind Signatures.

Non-Disclosing Credential On-chaining for Blockchain-based Decentralized Applications

BPA: A decentralized payment system that balances privacy and auditability

Blockchain-based CP-ABE data sharing and privacy-preserving scheme using distributed KMS and zero-knowledge proof

Compact Multiple Attribute-Based Signatures With Key Aggregation and Its Application

Practical Deniable Authentication for Pervasive Computing Environments.

Practical and Efficient Attribute-Based Encryption with Constant-Size Ciphertexts in Outsourced Verifiable Computation.

Publicly Verifiable Outsourced Computation with a Key Distribution Centre

Universally Composable Key-Insulated and Privacy-Preserving Signature Scheme with Publicly Derived Public Key.

Supervised and Revocable Decentralized Identity Privacy Protection Scheme

PRI: PCH-based Privacy-Preserving with Reusability and Interoperability for Enhancing Blockchain Scalability

1-Round Distributed Key Generation with Efficient Reconstruction Using Decentralized CP-ABE

A Verifiable Credentials System with Privacy-Preserving Based on Blockchain

Implementation and Security Test of Zero-Knowledge Protocols on SSI Blockchain

On Key Issuing Privacy in Distributed Online Social Networks

Catch Me if You Can: A Secure Bilateral Access Control System with Anonymous Credentials