Skip to content

Home > Resources > papers > CMZ14-KVAC

Algebraic MACs and Keyed-Verification Anonymous Credentials (Chase, Meiklejohn, Zaverucha 2014)

Last modified: 2026-10-27
DOI: 10.1145/2660267.2660328 · URL: https://doi.org/10.1145/2660267.2660328

Summary

Introduces keyed-verification anonymous credentials (KVAC), where issuer and verifier share a secret key, so credentials can be built from algebraic MACs in prime-order groups without pairings. Presentations use efficient Sigma-protocol proofs. The CMZ construction is the basis of Signal's private groups and of later KVAC work (BBDT16-KVAC, Orr25-Revisiting-KVAC), and indirectly of server-aided credentials such as BBS# (CHLT25-Server-Aided-AC).