Performance Issues of Selective Disclosure and Blinded Issuing Protocols on Java Card

Authors:
Hendrik Tews;Bart Jacobs
Affiliations:
Digital Security Group, Radboud Universiteit Nijmegen, The Netherlands;Digital Security Group, Radboud Universiteit Nijmegen, The Netherlands
Venue:
WISTP '09 Proceedings of the 3rd IFIP WG 11.2 International Workshop on Information Security Theory and Practice. Smart Devices, Pervasive Systems, and Ubiquitous Networks
Year:
2009

Citing 7
Cited 2

Decentralized authorization with ECDSA on a Java smart card

Proceedings of the fourth working conference on smart card research and advanced applications on Smart card research and advanced applications
Rethinking Public Key Infrastructures and Digital Certificates: Building in Privacy

Rethinking Public Key Infrastructures and Digital Certificates: Building in Privacy
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Self-Blindable Credential Certificates from the Weil Pairing

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Dismantling MIFARE Classic

ESORICS '08 Proceedings of the 13th European Symposium on Research in Computer Security: Computer Security
Reverse-engineering a cryptographic RFID tag

SS'08 Proceedings of the 17th conference on Security symposium
Wirelessly Pickpocketing a Mifare Classic Card

SP '09 Proceedings of the 2009 30th IEEE Symposium on Security and Privacy

Developing efficient blinded attribute certificates on smart cards via pairings

CARDIS'10 Proceedings of the 9th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Application
Anonymous ticketing for NFC-Enabled mobile phones

INTRUST'11 Proceedings of the Third international conference on Trusted Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we report on the performance of the RSA variants of Brands protocols for zero-knowledge proof and restrictive blinded issuing . The performance is relatively bad: For 4 attributes and an RSA key size of 1280 bits, blinded issuing takes about 10 seconds and the zero-knowledge proof takes about 9 seconds. For 2 attributes the zero-knowledge proof drops to 5 seconds. The poor performance comes from the fact that the cryptographic coprocessor on the Java card can only be employed in very limited ways. With appropriate support of the cryptographic coprocessor both protocols would run much faster.