Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Note that for online scenarios, ARKG gives assurance of same-hardware binding #18

Merged
merged 2 commits into from
May 13, 2024
Merged

Note that for online scenarios, ARKG gives assurance of same-hardware binding #18

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
70019b9
Note that for online scenarios, ARKG gives assurance of same-hardware…
emlun May 2, 2024
50d9beb
Also note that public keys can be generated in userspace instead of s…
emlun May 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion draft-bradleylundberg-cfrg-arkg.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -145,8 +145,13 @@ Some motivating use cases of ARKG include:
which is set to use single-use asymmetric keys to prevent colluding verifiers from using public keys as correlation handles.
Each digital identity credential would thus be issued with a single-use proof-of-possession key,
used only once to present the credential to a verifier.
ARKG enables offline usage scenarios by allowing pre-generation of public keys for single-use credentials
ARKG empowers both online and offline usage scenarios:
for offline scenarios, ARKG enables pre-generation of public keys for single-use credentials
without needing to access the hardware security device that holds the private keys.
For online scenarios, ARKG gives the credential issuer assurance
that all derived private keys are bound to the same secure hardware element.
In both cases, application performance may be improved
since public keys can be generated in a general-purpose execution environment instead of a secure enclave.

- __Enhanced forward secrecy__:
The use of ARKG can facilitate forward secrecy in certain contexts.
Expand Down
Loading