Algebraic MACs and Keyed-Verification Anonymous Credentials
Melissa Chase, Sarah J Meiklejohn, Greg Zaverucha · 2014
We consider the problem of constructing anonymous credentials for use in a setting where the issuer of credentials is also the verifier, or more generally where the issuer and verifier have a shared key. In this setting we can use message authentication codes (MACs) instead of public key signatures as the basis for the credential system.