Domain-specific pseudonymous signatures

A local proof of concept for domain-specific pseudonymous signatures. A user can sign under a pseudonym associated with a particular domain.

All roles run in this browser, including the authority. This is a research demonstration, not a production service.

Loading MCL WebAssembly...

System global parameters

g1:
g2:
s:
h:
z:
Z:

User 1

Revocation token

revX:
revU:

Private key

u:
x:
A:

User 2

Revocation token

revX:
revU:

Private key

u:
x:
A:

Domain 1 public key

dPK:

Pseudonym of User 1 in Domain 1

dnym:

Pseudonym of User 2 in Domain 1

dnym:

Domain 2 public key

dPK:

Pseudonym of User 1 in Domain 2

dnym:

Pseudonym of User 2 in Domain 2

dnym:

User 1 action



Signed in:

Is correct:

User 2 action



Signed in:

Is correct:

Deanonymization


Deanonymization result:
Operation ms
Gen system globals 0
Join (client side) 0
Issue (server side) 0
Join + Issue 0
Create domain 0
Gen pseudonym 0
Create signature 0
Verify signature 0
Deanonymization (1 user in database) 0