This enables us to encrypt group data using an efficient Elgamal-like encryption scheme, and to prove in zero-knowledge that the encrypted data is certified by a credential. The benefit of the new KVAC is that attributes may be elements in G, whereas previous schemes could only support attributes that were integers modulo the order of G. Members of the group authenticate to the server in a way that reveals only that they correspond to some encrypted entry, then read and write the encrypted entries.Īuthentication in our design uses a primitive called a keyed-verification anonymous credential~(KVAC), and we construct a new KVAC scheme based on an algebraic MAC, instantiated in a group G of prime order. In the proposed solution, a central server stores the group membership in the form of encrypted entries. The goal is to support private groups where membership information is readily available to all group members but hidden from the service provider or anyone outside the group. In this paper we present a system for maintaining a membership list of users in a group, designed for use in the Signal Messenger secure messaging app.
0 kommentar(er)
