… Traditional formulations of authenticated encryption (AE) implicitly assume that auxiliary …
introduce a primitive we call anonymous nonce-based AE, or anAE. Unlike traditional AE [6, 10, …

We propose an authentication scheme in which users can be authenticated anonymously
so long as times that they are authenticated is within an allowable number. The proposed …

… We use A to construct an adversary AE that attacks the encryption scheme. We will show
that AE can succeed in the following experiment with probability ϵ(n): Adversary AE is given l …

… We extend the Camenisch-Lysyanskaya anonymous credential system such that selective
… an attribute e that is contained in {e1, ...., el}, then there exists an integer a such that ae = …

… DAAsignature (note that (Z/Ae) is known to the host). Note that the SPK produced by the
TPM is not anonymous (even with a random ζ) as the value (Z/Ae) would fully identify the TPM. …

… an anonymous access control scheme that leverages SGX as TEE only for a narrow
scope and deployment: enforcing anonymity … (AE) and trusted execution environments (TEEs). …

… We present the first anonymous credential system in which services can “blacklist” … the
anonymity of their well-behaving users. By guaranteeing anonymity to all users, anonymous …

… powerful anonymity, in which the LBS is used through an anonymous communication model
… the proposed anonymous communication model provides powerful anonymity by generating…

… As discussed earlier, AE and ANON(b) do not leak any information about Alice or Bob. Since
no additional information is revealed during the teleportation step, it follows that ANONQ(|φ…

… We use Æ to denote the “signature of knowledge” of the above protocol. The issuer records
ðK;U;ÆÞ in its database, so that he has the ability to revoke this user in the future, see …