Paper 2025/1854 Original: eprint.iacr.org/2025/1854 ↗

Credential Revocation Assisted by a Covertly Corrupted Server

Alisa Pankova
Jelizaveta Vakarjuk
Abstract

European Digital Identity (EUDI) Wallet aims to provide end users with a way to get attested credentials from issuers, and present them to different relying parties. An important property mentioned in the regulatory frameworks is the possibility to revoke a previously issued credential. While it is possible to issue a short-lived credential, in some cases it may be inconvenient, and a separate revocation service which allows to revoke a credential at any time may be necessary. In this work, we propose a full end-to-end description of a generic credential revocation system, which technically relies on a single server and secure transmission channels between parties. We prove security of the proposed revocation functionality in the universal composability model, and estimate its efficiency based on a proof-of-concept implementation.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2026-06-09: last updated
2025-10-07: published
Short URL
https://ia.cr/2025/1854
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2025/1854,
      author = {Alisa Pankova and Jelizaveta Vakarjuk},
      title = {Credential Revocation Assisted by a Covertly Corrupted Server},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/1854},
      year = {2025},
      url = {https://eprint.iacr.org/2025/1854}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.