4 ms·
It seems plausible to imagine a system where PeerPub could retain their "published author to register This model relies on t a blind cryptographic signature.(h
by zmanian 12y ago
It seems plausible to imagine a system where PeerPub could retain their "published author to register
This model relies on t a blind cryptographic signature.(https://en.wikipedia.org/wiki/Blind_signature https://en.wikipedia.org/wiki/Blind_signature)
PeerPub generates a public/private key pair.
1. Alice wishes to register on PeerPub. She generates a Nonce N.
2. She blinds the nonce with a factor B.
3. She submits the blinded nonce and her identity to PeerPub. PeerPub checks her credentials and executes a blind signature of the number and returns it to Alice.
4.Alice now separately registers an account perhaps using a privacy protecting system like Tor. She uses the original N and the unblinded Signature.
5. PeerPub verifies N + signature and registers the account. PeerPub will have no way of linking N to the original credentials. PeerPub can record N and make sure it can only be used once to register an account.
- sweis 12y agoNot specific to PeerPub, but I helped work on a prototype of a federated login system based on OpenID that used blind signatures in a similar fashion: http://private-idp.appspot.com/ http://private-idp.appspot.com/ https://code.google.com/p/pseudoid/ https://code.google.com/p/pseudoid/ http://blind-signer.appspot.com/ http://blind-signer.appspot.com/ I haven't touched it for years and it looks like the login flow is broken now with the demo sites. Also, this uses unsafe server-side JS crypto for demo purposes only.
- zmanian 12y agoI emailed the PeerPub people about something like this. Will see if they bite.