Performance Issues of Selective Disclosure and Blinded Issuing Protocols on Java Card

Abstract. In this paper we report on the performance of the RSA variants of Brands protocols for zero-knowledge proof and restrictive blinded issuing [1]. The performance is relatively bad: For 4 attributes and an RSA key size of 1280 bits, blinded issuing takes about 10 seconds and the zero-knowledge proof takes about 9 seconds. For 2 attributes the zero-knowledge proof drops to 5 seconds. The poor performance comes from the fact that the cryptographic coprocessor on the Java card can only be employed in very limited ways. With appropriate support of the cryptographic coprocessor both protocols would run much faster. Key words: Java Card · selective disclosure · blinded issuing · performance

• Type: Conference
• Year: 2009
• Where: WISTP
• Authors: Hendrik Tews, Bart Jacobs
• Keywords: Blinded Issuing, Restrictive Blinded Issuing, Security Privacy, WISTP 2009, Zero-knowledge Proof