zkDaily - 2026-05-18

零知识证明 zkDaily

ZKP Frontier Tracker 🎯

Mon

05.18

2026

Device Binding for Anonymous Credentials on Legacy Phones

Paper

https://eprint.iacr.org/2026/965

Anja Lehmann Anonymous Credentials

Lehmann et al. propose three constructions for device binding of anonymous credentials on legacy phones, using standard ECDSA signatures for proof-of-possession, bridging pairing-friendly curves with P256.

Notes

Anonymous credentials lack device binding, risking credential cloning.
Existing efficient binding uses pairing-friendly curves, incompatible with legacy phone P256 hardware.
Three constructions bridge P256 to pairing curves with different trade-offs.
Fastest: ~1.5KB proof, <500ms, using simple arithmetic circuit.
Circuit-free: ~500ms but ~175KB proof.
Designed with reductions of knowledge framework for modular security analysis.

Collected by @icerdesign

零知识证明 zkDaily

Q&A Deep Dive 💬

Mon

05.18

2026

What is device binding?

Device binding ties credentials to secure phone hardware to prevent credential cloning or sharing.

Why do legacy phones create compatibility issues?

Efficient anonymous credentials usually rely on pairing-friendly curves, while legacy phone hardware mainly supports ECDSA and P256 curves.

How does the paper solve the curve compatibility problem?

The paper introduces bridging proofs that allow pairing-based credentials to use standard ECDSA proof-of-possession for device binding.

Prompted by @icerdesign