eprint.iacr.orgpaperedaBits in the Exponent (edaBitE) and Issuer-Hiding Blind Signatures from ML-DSA and VOLE-in-the-Head
Presents the first blind signature in which the issuer runs unmodified NIST-standardized ML-DSA, so it works with certified secure elements. Issuance is an ML-DSA signature on a commitment. The blind signature is a VOLE-in-the-head zero-knowledge proof of knowledge of that signature, about 1 MB, under 1 s to produce and 0.5 s to verify. Security reduces to ML-DSA EUF-CMA and the proof system. Issuer-hiding and selective disclosure add a few tens of KB. The paper also introduces edaBitE, a batch consistency check between binary and prime-field commitments that replaces the costly edaBits checks.
TL;DR Post-quantum blind signature using an unmodified ML-DSA issuer plus VOLE-in-the-head ZK proofs, with issuer-hiding and selective disclosure for anonymous credentials, built on a new edaBitE consistency check.
Organisations named here
- edaBitE
- edaBits
- EUF-CMA
Technologies named here
- ML-DSA
- VOLE-in-the-Head
- NIST
Techniques named here
- Issuer-hiding and selective disclosure of signed attributes
Related in Identity & Access
huntress.comarticleEducation Under Attack: The Pattern Behind Recent University Breaches
huntress.comarticleNext-Gen Phishing Tactics Users Aren’t Ready For | Huntress
.png)
aikido.devwriteupGoogle API keys keep working after you delete them
