Home > Resources > papers > FS24-Longfellow

Anonymous Credentials from ECDSA (Frigo & shelat 2024)

URL: https://eprint.iacr.org/2024/2010

Summary

Presents Longfellow, a ZK proof system that builds anonymous credential schemes directly over ECDSA-signed documents (JWTs, ISO mDOC). Combines sumcheck, the Ligero argument system, efficient Reed-Solomon encoding, and specialised ECDSA circuits. ECDSA proofs are generated in 60 ms; fully standardised ISO MDOC proofs in 1.2 s on mobile. No pre-computation or trusted setup required; the construction is transparent and post-quantum safe.

Used by

• Longfellow

Related resources

• Comparing ZK Systems (eid-privacy, 2025) (blog, 2025)
• Crescent and Longfellow (eid-privacy, 2025) (blog, 2025)
• Ligero: Lightweight Sublinear Arguments Without a Trusted Setup (Ames et al. 2017) (paper, 2017)
• Overview of Privacy and Unlinkability (eid-privacy, 2025) (blog, 2025)
• Proof-of-Concept for ZKPs (eid-privacy, 2026) (blog, 2026)
• Spartan: Efficient and General-Purpose zkSNARKs Without Trusted Setup (Setty 2020) (paper, 2019)
• Vision: A Modular Framework for Anonymous Credential Systems (Lehmann, Sidorenko, Zacharakis 2025) (paper, 2025)