An Attack Against Fixed Value Discrete Logarithm Representations
Gergely Alpár, Jaap-Henk Hoepman, Wouter Lueks · 2013
Abstract Attribute-based credentials (ABCs) are an important buildingblockofprivacy-enhancingidentitymanagement.Sincenon-identifying attributes can easily be abused as the anonymity they provide hides the perpetrator, cryptographic mechanisms need to be introduced to make them revocable. However, most of these techniques are not efficient enough in practice. ABCs with practical revocation have recently been proposed by Hajny and Malina [5]. Their ABCs make use of different discrete logarithm representations of a fixed value. Although this technique is attractive as the verification of a particular issuer’s credentials is easy, it has an intrinsic weakness. Colluding users can efficiently forge new credentials that are indistinguishable from legally issued ones.