Questions tagged [anonymity]
Anonymity describes the state of being unknown or unacknowledged.
87
questions
0
votes
0
answers
31
views
How to anonymously poll for information in a small group of people?
A company wants to poll employees about their view of the company (by using a web system, say). They would like to do it anonymously, but they don't want people filling out forms more than once. An ...
4
votes
1
answer
354
views
Is it possible to anonymously distribute a set of secret keys among individuals
Just like picking one of the papers in a bowl is used to anonymously distribute a given set of numbers among individuals which lets nobody (including the person who distributes them) know who got what....
0
votes
0
answers
20
views
Ephemeral anonymous identities that can be slashed once forever with a single nullifier
Consider a ZKP anonymous credential scheme where each tuple of (x, identity_secret, merkle_root) corresponds to a unique nullifier computed as ...
0
votes
0
answers
24
views
How can we construct a ZKPoK which hides both $x$ and the witness $W_x$ in dynamic accumulators?
Consider a verification equation $ e(\Delta,\tilde{G}) = e(W_x,x\tilde{G}+pk_{acc})$ from a pairing based accumulator which uses the value $x$ and the corresponding witness $W_x$ to verify that a ...
8
votes
2
answers
253
views
Providing tokens for anonymous survey
I want to conduct an anonymous Internet survey (e.g. “What’s your favorite fruit?” with a multiple choice answer) among a given set of people. Double answers by the same participant are not allowed.
...
2
votes
1
answer
138
views
Deterministic EC key derivation with anonymity and proofs
Following up this question
There are 4 parties:
Alice, who needs to prove a posession of some statement $m$, unique to her, say a street address, which is basically a string of some predefined format,...
3
votes
0
answers
368
views
Why is ZKP authentication not used in practice?
I have been reading about Zero Knowledge Proof (ZKP) protocols for a while now. Among the applications I have seen the most is authentication (https://ethereum.org/en/zero-knowledge-proofs/#...
1
vote
0
answers
56
views
Should we classify things such as LIONESS and Tor as cryptographic primitives?
Presuming (if we ought to?) that we classify instantiations of algorithms as primitives,
https://cwe.mitre.org/data/definitions/1240.html
Colloquially, one would say that AES (and sometimes AES-256) ...
1
vote
1
answer
62
views
How can I distribute a set of anonymous tokens digitally among a known limited population to do anonymous voting?
TL:DR
How can I give a population of N people the chance to randomly pick one token each person guaranteeing those:
Nobody knows noone else's token.
Noone can pick more than one token.
Every person ...
1
vote
0
answers
69
views
Security of anonymous group credential issued over multiple user secret keys plus a common/public system message
In a group signature scheme based on Pointcheval-Sanders (PS) single-message signature, the anonymous credential $(\sigma_1,\sigma_2)$ issued by the group manager (GM) with secret key $sk = (x,y) \in \...
0
votes
1
answer
256
views
Anonymous Group Signature
I have been doing some research in group and ring signature literature for anonymous signatures. I am trying to find a group signature scheme which provide the following proprieties:
Anonymity for ...
5
votes
1
answer
319
views
What is the best way to pseudonymise IP addresses while retaining the ability to identify those that share a subnet?
Background: I'm developing an app that is based around registered users voting on stuff, and I want to create a heuristic that involves IP addresses as one way to flag accounts for further ...
1
vote
0
answers
37
views
Looking for a (partly) anonymous signature
I am looking a way to sign a document, so that everyone could verify that one person out of a group did, but only a special person and/or the group could know who signed it.
Let's say, X chooses a ...
1
vote
1
answer
143
views
l-Diversity logarithm
I wanted to make a little example for anonymization evaluation using l-Diversity. For that I'm using the following formula for Entropy l-Diversity ($E$ is the equivalence class, $S$ are all possible ...
3
votes
0
answers
85
views
Anonymization Standards
I'm interested in data anonymization techniques and scores for the quality of data anonymization in "the real world". I was told this is also part of cryptography.
What I know: In theory one ...
3
votes
1
answer
104
views
How could you disclose what you like and have someone respond with what you want without revealing who you are?
Bob likes Apples and Oranges (virtual, not physical). Alice and Eve are fruit sellers (again, virtual, not physical). Bob wants to indicate his appetite to buy one Apple and one Orange without ...
3
votes
1
answer
666
views
IS zk-SNARK not suitable for constructing anonymous authentication scheme?
zk-SNARK was a powerful tool for privacy-respecting e-cash. However, recent years, in the literatures about anonymous authentication scheme, such as group signatures, anonymous credential, blind ...
0
votes
0
answers
40
views
Difficult to guess the targeted receiver
The protocol is defined as :
Bob want to send message to one of his friends say $k$ friends , he does not want his others friends (except one whom he want to send message ) to tell who is targeted ...
1
vote
1
answer
75
views
Algorithm for anonymous but associated communications from a set of verified communicants?
Let's say that I'm selling a product, and I want to get authentic feedback from my customers. However, I have the following two constraints:
My customers must be able to give [at least some of] their ...
1
vote
0
answers
42
views
What is the main difference between anonymous authentication and using an anonymous credential?
What is the main difference between anonymous authentication and the use of an anonymous credential? And when we should use them?
0
votes
0
answers
59
views
Mechanisms for masking identifying unique IDs with non-identifying unique IDs to protect privacy?
I need to suggest mechanisms for masking unique codes in a database with different unique codes that are not derived from the original unique codes, but are equivalently unique in that they could ...
2
votes
1
answer
68
views
Crypto scheme to map data to users in a way that is anonymous to database server
I am trying to finish a paper on censorship resistant data-sharing systems in semi-centralized ways. I know the below threat model can be mitigated by using decentralized system, but I am looking for ...
1
vote
0
answers
63
views
Cryptographic Code Anonymization
I've been reading a lot about techniques related to stylometry whereby programmers can be de-anonymized by analyzing their source code.
Resisting deanonymization seems like a multifaceted problem. ...
2
votes
1
answer
149
views
How to prove in zero-knowledge that the attributes of Pointcheval Sanders signature is the opening of a commitment?
In anonymous credentials schemes, it is possible to anonymously prove knowledge of a signature. Proposals for anonymous credentials with attributes also include a method for proving statements about ...
3
votes
1
answer
226
views
How to achieve identity authentication without revealing credentials
I am looking at a scenario where I would like to claim to an authority (call it A) that I am indeed me without revealing my identity documents. I am guessing some zero knowledge protocol has to be ...
0
votes
1
answer
125
views
To what extent would Bitcoin be private without address reuse?
Let's say Bitcoin had these rules from the start:
An address with balance cannot more receive money
An address must use all its money in one transaction
This would prevent address re-use. To what ...
1
vote
0
answers
63
views
Can two anonymous parties determine whether they interacted before, without being able to link encounters?
Assume an anonymous communication system in which anonymous parties randomly meet in pairs to exchange information.
How could two anonymous parties determine whether they have interacted before, ...
0
votes
1
answer
102
views
Proving anonymous credential presentation
In a CL-based or CKS-based anonymous credential system, how can a verifier $V$ prove that a credential holder $H$ has presented it a credential that has been issued by an issuer $I$ without ...
1
vote
0
answers
137
views
Dining-Cryptographer Net (DC-Net) Scheme that Handles Collisions?
[Question edited at the request of Mods]
I recently became fascinated with the elegant and simple solution that Chaum proposed for the Dining Cryptographers problem. If you are unfamiliar, please ...
2
votes
1
answer
82
views
Faster Shuffling for a Simple Application
Alice, Bob, and Charlie are working on three projects.
Alice is the manager. At the beginning of each day, she chooses one
project to work on (this choice is based on her preferences and is
not ...
1
vote
0
answers
218
views
Difference between DCnet and mixnet in terms of forwarding anonymity?
It seems that with both anonymous communication protocols we can achieve some level of forwarding anonymity, however, is one protocol better than the other in this respect? It seems that they both ...
1
vote
0
answers
163
views
Why group signature based CL signature is in "sign-encrypt-prove" paradigm
In this paper, it referred that there are two paradigms used in constructing group signatures: the "sign-encrypt-prove"(SEP) paradigm and "sign-randomize-proof"(SRP) paradigm.
As said in this paper, ...
1
vote
0
answers
162
views
TPM/FIDO Direct Anonymous Attestation practicality
DAA (Direct Anonymous Attestation) is not the only scheme to achieve anonymous attestation. In general, these schemes allow an entity to stay anonymous throughout the attestation process. The concern ...
1
vote
1
answer
442
views
What is the difference between an anonymous-encryption scheme and an authenticated-encryption scheme?
I was going through Indy-SDK when these two schemes were referenced. I want to know the precise differences between the two.
Indy-SDK links for reference to:
authenticated-encryption scheme
...
1
vote
0
answers
76
views
Pros/cons of anonymity when messages are encrypted? [closed]
Let's say I'm making an end-to-end encrypted messaging app with the goal of putting "privacy first." The contents of messages are encrypted, but in the current model, it is still visible to the server ...
1
vote
2
answers
85
views
Is there any way to check signed documents in a group of people without knowing who signed which?
Let's say there are 3 people A, B, C. Everybody knows their public keys. They sign documents/messages and normally we can know who signed which by checking with their public keys.
Is there any way to ...
1
vote
1
answer
163
views
What is an "anonymous admissible timestamp"?
Can anybody explain the term "anonymous admissible timestamp" to me? Could you show a case where it is useful to apply it?
I came across this term in the comments of a question on the StackExchange ...
1
vote
0
answers
56
views
Proofs of security for anonymity in a multi-party setting
I'm looking for material that proves the anonymity of parties in a non-interactive setting. I would like to know if there are simulation based proofs (UC) and property based proofs (game based) for ...
1
vote
0
answers
23
views
The semantic security in Anonymous Hierarchical identity-bases encryption?
In Anonymous Hierarchical Identity-Based Encryption (Without Random Oracles) by Boyen, to prove security it defined challenge ciphertext like
I actually can't get how does the proof work? Why we ...
2
votes
1
answer
437
views
Anonymity of Paillier cryptosystem in e-voting system
I'm not an expert so at the moment I'm trying to figure out (at high level) how such cryptosystem would exploit it's homomorphic properties to guarantee anonymity in a e-voting system.
As far as i ...
0
votes
0
answers
60
views
Derive anonymous dsa key-pair from two certificate authorities
Is it possible to derive a dsa key-pair based on two private keys from different/independent "Certificate Authorities" (ca1 and ca2) to sign s.th. which then verifies only that the signature is a ...
3
votes
1
answer
229
views
Advantages of group signature schemes without encryption over with encryption
Many group signature schemes follow sign-encrypt then prove paradigm, where a membership certificate, is encrypted using some public-key encryption scheme. There are some encryption free group ...
0
votes
1
answer
242
views
Does an anonymous signature hide the sender's identity from the receiver?
Does an anonymous signature hide the sender's identity from the receiver, or simply just hide the sender's identity from an eavesdropper or third party?
1
vote
0
answers
65
views
Seeking Fast Bloom Filter for Anonymous Address
I had an idea to use something like public message boards to pass secrets anonymously and non-interactively (similar to TV/Movie Trope : http://tvtropes.org/pmwiki/pmwiki.php/Main/PublicSecretMessage )...
0
votes
1
answer
105
views
A method to receive payments at obscured addresses [closed]
The background:
We assume that coin ownership and payments are recorded on a public ledger.
Suppose Alice wants to publish some information to let her receive coins from anyone.
But she does not want ...
1
vote
0
answers
59
views
identify PK in ring signatures by using (t,n)-threshold
Consider a group of $n$ public keys $pk_1,...,pk_n$ with corresponding secret keys $sk_1,...,sk_n$.
I'm looking for a cryptographic primitive with the following properties:
Ring signature property.
...
1
vote
0
answers
50
views
Is integrity important when building anonymity? [closed]
I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
1
vote
1
answer
385
views
Understanding the big picture with regard to how anonymous credentials work
I'm trying to learn about anonymous credential systems. I started with Lysyanskaya's thesis, which gives an outline of how to build an AC system given some particular primitives (signature scheme, ...
1
vote
1
answer
197
views
How to anonymously transfer ownership where sender cannot resend
I'm new to cyptography, so I apologize if this is a dumb/impossible goal or has already been answered (I was not able to find it by searching).
I wish to devise an anonymous protocol for transferring ...
4
votes
1
answer
2k
views
Is it possible to derive an Ed25519-public-key from an Ed25519-signature?
If you have an Ed25519-signature and the signed message, can you derive the corresponding public-key or is the signature anonymous (except if you already know the public-key of course)?