Home > Resources > papers > Ora24-BBS-Sharp

The BBS# protocol: Technical details (Orange 2024)

Last modified: 2026-10-23

URL: https://github.com/user-attachments/files/15905230/BBS_Sharp_Short_TR.pdf

Summary

Technical report by Orange (June 2024, shared in the EUDI ARF discussion #211) describing BBS#, a BBS/BBS+ variant designed for the EU Digital Identity Wallet. BBS# avoids pairings on the holder side and binds credentials to keys held in existing secure hardware using standard ECDSA or EC-Schnorr, so that unlinkable presentations can be produced without changing deployed secure elements; it also covers selective disclosure compatible with ISO mDL and deniable presentations. A peer-reviewed version appeared as ePrint 2025/619 (Making BBS Anonymous Credentials eIDAS 2.0 Compliant).

Related resources

• Device Binding for Anonymous Credentials on Legacy Phones (Lehmann, Zacharakis 2026) (paper, 2026)
• Device-Bound Anonymous Credentials With(out) Trusted Hardware (Friedrichs, Harding, Lehmann, Lysyanskaya 2025) (paper, 2025)
• Improved Algebraic MACs and Practical Keyed-Verification Anonymous Credentials (Barki, Brunet, Desmoulins, Traoré 2016) (paper, 2016)
• Revisiting BBS Signatures (Tessaro, Zhu 2023) (paper, 2023)
• Server-Aided Anonymous Credentials (Chairattana-Apirom, Harding, Lysyanskaya, Tessaro 2025) (paper, 2025)
• Short Group Signatures (Boneh, Boyen, Shacham 2004) (paper, 2004)