Which of these population tracking protocols is better from a cryptography point of view?
- Pan-European Privacy-Preserving Proximity Tracing (PEPP-PT)
- Decentralized Privacy-Preserving Proximity Tracing (DP-3T)
I have read a paper discussing some of the security concerns, but it does not go into much detail about the cryptographic technology involved.
For example, what happens if Bluetooth keys are compromised? Is revocation possible in practice? How is key generation performed in the first place? Are keys generated locally by each device?