Skip to content

Home > Resources > papers > CDL16-DAA-qSDH

Anonymous Attestation Using the Strong Diffie Hellman Assumption Revisited (Camenisch, Drijvers, Lehmann 2016)

Last modified: 2026-10-27

Summary

Shows that the security proofs of several q-SDH-based Direct Anonymous Attestation (DAA) schemes are flawed and proposes a new, provably secure DAA scheme based on BBS+ signatures (TRUST 2016). Along the way it proves the security of BBS+ in a setting that allows a more efficient signature (dropping one element), cited by the IRTF BBS draft. Relevant to e-ID because DAA is the TPM/hardware analogue of holder-bound anonymous credentials.