Abstract:Today, digital identity management for individuals is either inconvenient and error-prone or creates undesirable lock-in effects and violates privacy and security expectations. These shortcomings inhibit the digital transformation in general and seem particularly concerning in the context of novel applications such as access control for decentralized autonomous organizations and identification in the Metaverse. Decentralized or self-sovereign identity (SSI) aims to offer a solution to this dilemma by empowering individuals to manage their digital identity through machine-verifiable attestations stored in a "digital wallet" application on their edge devices. However, when presented to a relying party, these attestations typically reveal more attributes than required and allow tracking end users' activities. Several academic works and practical solutions exist to reduce or avoid such excessive information disclosure, from simple selective disclosure to data-minimizing anonymous credentials based on zero-knowledge proofs (ZKPs). We first demonstrate that the SSI solutions that are currently built with anonymous credentials still lack essential features such as scalable revocation, certificate chaining, and integration with secure elements. We then argue that general-purpose ZKPs in the form of zk-SNARKs can appropriately address these pressing challenges. We describe our implementation and conduct performance tests on different edge devices to illustrate that the performance of zk-SNARK-based anonymous credentials is already practical. We also discuss further advantages that general-purpose ZKPs can easily provide for digital wallets, for instance, to create "designated verifier presentations" that facilitate new design options for digital identity infrastructures that previously were not accessible because of the threat of man-in-the-middle attacks.

Practical Zero-Knowledge Arguments from Σ-Protocols

Practical zero-knowledge arguments from ∑-protocols

Generic yet Practical ( Statistical ) Zero-Knowledge from any Public-Coin HVZK ∗ †

Generic and Practical Resettable Zero-Knowledge in the Bare Public-Key Model

Lightweight Zero-Knowledge Proofs for Crypto-Computing Protocols.

Interactive zero-knowledge with restricted random oracles

Generic Yet Practical ZK Arguments from Any Public-Coin HVZK

ZKPs: Does This Make The Cut? Recent Advances and Success of Zero-Knowledge Security Protocols

Resettable Zero-Knowledge In The Weak Public-Key Model

Concurrently Knowledge-Extractable Resettable-ZK in the Bare Public-Key Model

Experimental relativistic zero-knowledge proofs

A Survey on the Applications of Zero-Knowledge Proofs

Constant-Round Concurrently-Secure Rzk in the (real) Bare Public-Key Model

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

Reduction Zero-Knowledge.

On Zero-Knowledge Proofs over the Quantum Internet

Implementation and Security Test of Zero-Knowledge Protocols on SSI Blockchain

A Survey on Zero Knowledge Range Proofs and Applications

zksk: A Library for Composable Zero-Knowledge Proofs

SoK: What don't we know? Understanding Security Vulnerabilities in SNARKs

Bringing data minimization to digital wallets at scale with general-purpose zero-knowledge proofs