Hecate: Threshold Anonymous Credentials With Private Verifiers and Issuer-Hiding

Summary

Hecate is a framework for threshold anonymous credentials that gives verifiers privacy as well as users. It lets a verifier define a function policy that a user must satisfy before receiving the verifier's private information, while keeping threshold issuance and issuer-hiding. The authors build it with subset predicate encryption and threshold signatures, prove unforgeability, privacy, anonymity and issuer-hiding, and report policy matching and credential presentation taking about 37 ms and 60 ms on a personal laptop.