Vulnerabilities in Anonymous Credential Systems

  • Raghav Bhaskar ,
  • K. Chandrasekaran ,
  • Satyanarayana V. Lokam ,
  • P. L. Montgomery ,
  • R. Venkatesan ,
  • Yacov Yacobi ,

Electr. Notes Theor. Comput. Sci. | , Vol 197(2): pp. 141-148

Download BibTex

We show the following:

(i)

In existing anonymous credential revocation systems, the revocation authority can link the transactions of any user in a subset T of users in

fake failed sessions.
(ii)

A concern about the DLREP-I anonymous credentials system described in [Stefan Brands: Rethinking public key infrastructure and Digital Certificates; The MIT Press, Cambridge Massachusetts, London England. ISBN 0-262-02491-8] and [Stefan Brands: A Technical Overview of Digital Credentials; February 2002 (was a white paper in credentica.com)].