Abstract:Verifiable credentials are a digital analogue of physical credentials. Their authenticity and integrity are protected by means of cryptographic techniques, and they can be presented to verifiers to reveal attributes or even predicates about the attributes included in the credential. One way to preserve privacy during presentation consists in selectively disclosing the attributes in a credential. In this paper we present the most widespread cryptographic mechanisms used to enable selective disclosure of attributes identifying two categories: the ones based on hiding commitments - e.g., mdl ISO/IEC 18013-5 - and the ones based on non-interactive zero-knowledge proofs - e.g., BBS signatures. We also include a description of the cryptographic primitives used to design such cryptographic mechanisms. We describe the design of the cryptographic mechanisms and compare them by performing an analysis on their standard maturity in terms of standardization, cryptographic agility and quantum safety, then we compare the features that they support with main focus on the unlinkability of presentations, the ability to create predicate proofs and support for threshold credential issuance. Finally we perform an experimental evaluation based on the Rust open source implementations that we have considered most relevant. In particular we evaluate the size of credentials and presentations built using different cryptographic mechanisms and the time needed to generate and verify them. We also highlight some trade-offs that must be considered in the instantiation of the cryptographic mechanisms.

Research of Digital Credentials Selective Disclosure

Development Of Data Authenticity Verification System In Regional Health Information Network

Privacy Protection in Trust Management

Distributed Certification Application Via a Trusted Dealer

An Efficient Delegation-Based Anonymous Authentication Protocol

On Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials

Selective disclosure in digital credentials: A review

Threshold Attribute-Based Credentials With Redactable Signature

A General Formal Framework of Analyzing Selective Disclosure Attribute-Based Credential Systems.

An Efficient Merkle-Tree-Based Authentication Scheme for Smart Grid.

Preventing Unofficial Information Propagation

A Verifiable Credentials System with Privacy-Preserving Based on Blockchain

S-Cred: An accountable anonymous credential scheme with decentralized verification and flexible revocation

Provable Secure and Efficient Digital Rights Management Authentication Scheme Using Smart Card Based on Elliptic Curve Cryptography

Evaluation and Analysis of Standard Security Technology in V2X Communication -- Exploring ECQV Implicit Certificate Cracking

DTACB: Dynamic Threshold Anonymous Credentials with Batch-Showing

A Secure Distributed Authentication scheme based on CRT-VSS and Trusted Computing in MANET

A Tree-based Construction for Verifiable Diplomas with Issuer Transparency

Only you can check my data: certificateless and designed-verifier auditing of multi-cloud storage with faults localization

X.509 Information Security Certification Based on Post-Quantum Cryptography

A key distributed storage mechanism based on user credibility