Questions tagged [anonymity]

Anonymity describes the state of being unknown or unacknowledged.

Filter by
Sorted by
Tagged with
0 votes
0 answers
31 views

How to anonymously poll for information in a small group of people?

A company wants to poll employees about their view of the company (by using a web system, say). They would like to do it anonymously, but they don't want people filling out forms more than once. An ...
user1145880's user avatar
4 votes
1 answer
354 views

Is it possible to anonymously distribute a set of secret keys among individuals

Just like picking one of the papers in a bowl is used to anonymously distribute a given set of numbers among individuals which lets nobody (including the person who distributes them) know who got what....
zokaria's user avatar
  • 41
0 votes
0 answers
20 views

Ephemeral anonymous identities that can be slashed once forever with a single nullifier

Consider a ZKP anonymous credential scheme where each tuple of (x, identity_secret, merkle_root) corresponds to a unique nullifier computed as ...
morro's user avatar
  • 1
0 votes
0 answers
24 views

How can we construct a ZKPoK which hides both $x$ and the witness $W_x$ in dynamic accumulators?

Consider a verification equation $ e(\Delta,\tilde{G}) = e(W_x,x\tilde{G}+pk_{acc})$ from a pairing based accumulator which uses the value $x$ and the corresponding witness $W_x$ to verify that a ...
Kanchan Bisht's user avatar
8 votes
2 answers
253 views

Providing tokens for anonymous survey

I want to conduct an anonymous Internet survey (e.g. “What’s your favorite fruit?” with a multiple choice answer) among a given set of people. Double answers by the same participant are not allowed. ...
Alfe's user avatar
  • 219
2 votes
1 answer
138 views

Deterministic EC key derivation with anonymity and proofs

Following up this question There are 4 parties: Alice, who needs to prove a posession of some statement $m$, unique to her, say a street address, which is basically a string of some predefined format,...
John dow's user avatar
  • 149
3 votes
0 answers
368 views

Why is ZKP authentication not used in practice?

I have been reading about Zero Knowledge Proof (ZKP) protocols for a while now. Among the applications I have seen the most is authentication (https://ethereum.org/en/zero-knowledge-proofs/#...
Ricardo Martínez's user avatar
1 vote
0 answers
56 views

Should we classify things such as LIONESS and Tor as cryptographic primitives?

Presuming (if we ought to?) that we classify instantiations of algorithms as primitives, https://cwe.mitre.org/data/definitions/1240.html Colloquially, one would say that AES (and sometimes AES-256) ...
cyborg's user avatar
  • 69
1 vote
1 answer
62 views

How can I distribute a set of anonymous tokens digitally among a known limited population to do anonymous voting?

TL:DR How can I give a population of N people the chance to randomly pick one token each person guaranteeing those: Nobody knows noone else's token. Noone can pick more than one token. Every person ...
Xavi Montero's user avatar
1 vote
0 answers
69 views

Security of anonymous group credential issued over multiple user secret keys plus a common/public system message

In a group signature scheme based on Pointcheval-Sanders (PS) single-message signature, the anonymous credential $(\sigma_1,\sigma_2)$ issued by the group manager (GM) with secret key $sk = (x,y) \in \...
Star Seller's user avatar
0 votes
1 answer
256 views

Anonymous Group Signature

I have been doing some research in group and ring signature literature for anonymous signatures. I am trying to find a group signature scheme which provide the following proprieties: Anonymity for ...
CipherX's user avatar
  • 381
5 votes
1 answer
319 views

What is the best way to pseudonymise IP addresses while retaining the ability to identify those that share a subnet?

Background: I'm developing an app that is based around registered users voting on stuff, and I want to create a heuristic that involves IP addresses as one way to flag accounts for further ...
Inkling's user avatar
  • 161
1 vote
0 answers
37 views

Looking for a (partly) anonymous signature

I am looking a way to sign a document, so that everyone could verify that one person out of a group did, but only a special person and/or the group could know who signed it. Let's say, X chooses a ...
jjj's user avatar
  • 469
1 vote
1 answer
143 views

l-Diversity logarithm

I wanted to make a little example for anonymization evaluation using l-Diversity. For that I'm using the following formula for Entropy l-Diversity ($E$ is the equivalence class, $S$ are all possible ...
Titanlord's user avatar
  • 2,244
3 votes
0 answers
85 views

Anonymization Standards

I'm interested in data anonymization techniques and scores for the quality of data anonymization in "the real world". I was told this is also part of cryptography. What I know: In theory one ...
Titanlord's user avatar
  • 2,244
3 votes
1 answer
104 views

How could you disclose what you like and have someone respond with what you want without revealing who you are?

Bob likes Apples and Oranges (virtual, not physical). Alice and Eve are fruit sellers (again, virtual, not physical). Bob wants to indicate his appetite to buy one Apple and one Orange without ...
user13017275's user avatar
3 votes
1 answer
666 views

IS zk-SNARK not suitable for constructing anonymous authentication scheme?

zk-SNARK was a powerful tool for privacy-respecting e-cash. However, recent years, in the literatures about anonymous authentication scheme, such as group signatures, anonymous credential, blind ...
ming alex's user avatar
  • 368
0 votes
0 answers
40 views

Difficult to guess the targeted receiver

The protocol is defined as : Bob want to send message to one of his friends say $k$ friends , he does not want his others friends (except one whom he want to send message ) to tell who is targeted ...
Sam's user avatar
  • 49
1 vote
1 answer
75 views

Algorithm for anonymous but associated communications from a set of verified communicants?

Let's say that I'm selling a product, and I want to get authentic feedback from my customers. However, I have the following two constraints: My customers must be able to give [at least some of] their ...
JamesTheAwesomeDude's user avatar
1 vote
0 answers
42 views

What is the main difference between anonymous authentication and using an anonymous credential?

What is the main difference between anonymous authentication and the use of an anonymous credential? And when we should use them?
Z.P.'s user avatar
  • 353
0 votes
0 answers
59 views

Mechanisms for masking identifying unique IDs with non-identifying unique IDs to protect privacy?

I need to suggest mechanisms for masking unique codes in a database with different unique codes that are not derived from the original unique codes, but are equivalently unique in that they could ...
Dinosaur Reporter's user avatar
2 votes
1 answer
68 views

Crypto scheme to map data to users in a way that is anonymous to database server

I am trying to finish a paper on censorship resistant data-sharing systems in semi-centralized ways. I know the below threat model can be mitigated by using decentralized system, but I am looking for ...
skydanc3r's user avatar
1 vote
0 answers
63 views

Cryptographic Code Anonymization

I've been reading a lot about techniques related to stylometry whereby programmers can be de-anonymized by analyzing their source code. Resisting deanonymization seems like a multifaceted problem. ...
Sidharth Ghoshal's user avatar
2 votes
1 answer
149 views

How to prove in zero-knowledge that the attributes of Pointcheval Sanders signature is the opening of a commitment?

In anonymous credentials schemes, it is possible to anonymously prove knowledge of a signature. Proposals for anonymous credentials with attributes also include a method for proving statements about ...
joakimb's user avatar
  • 243
3 votes
1 answer
226 views

How to achieve identity authentication without revealing credentials

I am looking at a scenario where I would like to claim to an authority (call it A) that I am indeed me without revealing my identity documents. I am guessing some zero knowledge protocol has to be ...
Zoey's user avatar
  • 259
0 votes
1 answer
125 views

To what extent would Bitcoin be private without address reuse?

Let's say Bitcoin had these rules from the start: An address with balance cannot more receive money An address must use all its money in one transaction This would prevent address re-use. To what ...
Lucien's user avatar
  • 149
1 vote
0 answers
63 views

Can two anonymous parties determine whether they interacted before, without being able to link encounters?

Assume an anonymous communication system in which anonymous parties randomly meet in pairs to exchange information. How could two anonymous parties determine whether they have interacted before, ...
oc512's user avatar
  • 21
0 votes
1 answer
102 views

Proving anonymous credential presentation

In a CL-based or CKS-based anonymous credential system, how can a verifier $V$ prove that a credential holder $H$ has presented it a credential that has been issued by an issuer $I$ without ...
kentakenta's user avatar
1 vote
0 answers
137 views

Dining-Cryptographer Net (DC-Net) Scheme that Handles Collisions?

[Question edited at the request of Mods] I recently became fascinated with the elegant and simple solution that Chaum proposed for the Dining Cryptographers problem. If you are unfamiliar, please ...
A M's user avatar
  • 23
2 votes
1 answer
82 views

Faster Shuffling for a Simple Application

Alice, Bob, and Charlie are working on three projects. Alice is the manager. At the beginning of each day, she chooses one project to work on (this choice is based on her preferences and is not ...
bobuhito's user avatar
  • 315
1 vote
0 answers
218 views

Difference between DCnet and mixnet in terms of forwarding anonymity?

It seems that with both anonymous communication protocols we can achieve some level of forwarding anonymity, however, is one protocol better than the other in this respect? It seems that they both ...
John's user avatar
  • 11
1 vote
0 answers
163 views

Why group signature based CL signature is in "sign-encrypt-prove" paradigm

In this paper, it referred that there are two paradigms used in constructing group signatures: the "sign-encrypt-prove"(SEP) paradigm and "sign-randomize-proof"(SRP) paradigm. As said in this paper, ...
Laura's user avatar
  • 377
1 vote
0 answers
162 views

TPM/FIDO Direct Anonymous Attestation practicality

DAA (Direct Anonymous Attestation) is not the only scheme to achieve anonymous attestation. In general, these schemes allow an entity to stay anonymous throughout the attestation process. The concern ...
Consy's user avatar
  • 367
1 vote
1 answer
442 views

What is the difference between an anonymous-encryption scheme and an authenticated-encryption scheme?

I was going through Indy-SDK when these two schemes were referenced. I want to know the precise differences between the two. Indy-SDK links for reference to: authenticated-encryption scheme ...
Learner's user avatar
  • 11
1 vote
0 answers
76 views

Pros/cons of anonymity when messages are encrypted? [closed]

Let's say I'm making an end-to-end encrypted messaging app with the goal of putting "privacy first." The contents of messages are encrypted, but in the current model, it is still visible to the server ...
Potassium Ion's user avatar
1 vote
2 answers
85 views

Is there any way to check signed documents in a group of people without knowing who signed which?

Let's say there are 3 people A, B, C. Everybody knows their public keys. They sign documents/messages and normally we can know who signed which by checking with their public keys. Is there any way to ...
Bilal Gultekin's user avatar
1 vote
1 answer
163 views

What is an "anonymous admissible timestamp"?

Can anybody explain the term "anonymous admissible timestamp" to me? Could you show a case where it is useful to apply it? I came across this term in the comments of a question on the StackExchange ...
rapt's user avatar
  • 91
1 vote
0 answers
56 views

Proofs of security for anonymity in a multi-party setting

I'm looking for material that proves the anonymity of parties in a non-interactive setting. I would like to know if there are simulation based proofs (UC) and property based proofs (game based) for ...
zkvroon's user avatar
  • 88
1 vote
0 answers
23 views

The semantic security in Anonymous Hierarchical identity-bases encryption?

In Anonymous Hierarchical Identity-Based Encryption (Without Random Oracles) by Boyen, to prove security it defined challenge ciphertext like I actually can't get how does the proof work? Why we ...
Frankzhen's user avatar
2 votes
1 answer
437 views

Anonymity of Paillier cryptosystem in e-voting system

I'm not an expert so at the moment I'm trying to figure out (at high level) how such cryptosystem would exploit it's homomorphic properties to guarantee anonymity in a e-voting system. As far as i ...
Skary's user avatar
  • 371
0 votes
0 answers
60 views

Derive anonymous dsa key-pair from two certificate authorities

Is it possible to derive a dsa key-pair based on two private keys from different/independent "Certificate Authorities" (ca1 and ca2) to sign s.th. which then verifies only that the signature is a ...
Techradar's user avatar
  • 133
3 votes
1 answer
229 views

Advantages of group signature schemes without encryption over with encryption

Many group signature schemes follow sign-encrypt then prove paradigm, where a membership certificate, is encrypted using some public-key encryption scheme. There are some encryption free group ...
preethi's user avatar
  • 889
0 votes
1 answer
242 views

Does an anonymous signature hide the sender's identity from the receiver?

Does an anonymous signature hide the sender's identity from the receiver, or simply just hide the sender's identity from an eavesdropper or third party?
user2035863's user avatar
1 vote
0 answers
65 views

Seeking Fast Bloom Filter for Anonymous Address

I had an idea to use something like public message boards to pass secrets anonymously and non-interactively (similar to TV/Movie Trope : http://tvtropes.org/pmwiki/pmwiki.php/Main/PublicSecretMessage )...
jadb's user avatar
  • 437
0 votes
1 answer
105 views

A method to receive payments at obscured addresses [closed]

The background: We assume that coin ownership and payments are recorded on a public ledger. Suppose Alice wants to publish some information to let her receive coins from anyone. But she does not want ...
Nayuki's user avatar
  • 232
1 vote
0 answers
59 views

identify PK in ring signatures by using (t,n)-threshold

Consider a group of $n$ public keys $pk_1,...,pk_n$ with corresponding secret keys $sk_1,...,sk_n$. I'm looking for a cryptographic primitive with the following properties: Ring signature property. ...
Avilan's user avatar
  • 128
1 vote
0 answers
50 views

Is integrity important when building anonymity? [closed]

I was thinking about applying an anonymity process based on ECDSA signatures to anonymize blocks of information, not the public-key itself. Using a deterministic form of ECDSA to sign blocks and ...
shumy's user avatar
  • 418
1 vote
1 answer
385 views

Understanding the big picture with regard to how anonymous credentials work

I'm trying to learn about anonymous credential systems. I started with Lysyanskaya's thesis, which gives an outline of how to build an AC system given some particular primitives (signature scheme, ...
NNN's user avatar
  • 169
1 vote
1 answer
197 views

How to anonymously transfer ownership where sender cannot resend

I'm new to cyptography, so I apologize if this is a dumb/impossible goal or has already been answered (I was not able to find it by searching). I wish to devise an anonymous protocol for transferring ...
Paul Lamb's user avatar
4 votes
1 answer
2k views

Is it possible to derive an Ed25519-public-key from an Ed25519-signature?

If you have an Ed25519-signature and the signed message, can you derive the corresponding public-key or is the signature anonymous (except if you already know the public-key of course)?
K. Biermann's user avatar