This specification describes the Pseudonymous Signature Suite created in 2016 for the Linked Data Signatures specification. The Signature Suite utilizes the Camenisch-Lysyanskaya signature mechanism to provide pseudonymous signatures.
This is an experimental specification and is undergoing regular revisions. It is not fit for production deployment.
This specification describes the Pseudonymous Signature Suite created in 2016 for the Linked Data Signatures [[LD-SIGNATURES]] specification. It uses the RDF Dataset Normalization Algorithm [[RDF-DATASET-NORMALIZATION]] to transform the input document into its canonical form. It uses SHA-256 [[RFC6234]] as the message digest algorithm and Camenisch-Lysyanskaya [[CAMLYS]] as the signature algorithm.
The following terms are used to describe concepts involved in the generation and verification of the Linked Data Signature 2016 signature suite.
The 2016 Pseudonymous signature suite MUST be used in conjunction with the signing and verification algorithms in the Linked Data Signatures [[LD-SIGNATURES]] specification. The suite consists of the following algorithms:
Parameter | Value | Specification |
---|---|---|
canonicalizationAlgorithm | https://w3id.org/security#URDNA2015 | [[RDF-DATASET-NORMALIZATION]] |
digestAlgorithm | http://example.com/digests#sha256 | [[RFC6234]] |
signatureAlgorithm | https://w3id.org/security#CamLys2003 | [[CAMLYS]] |
No modifications to the Linked Data Signature algorithms are provided other than the algorithms specified in the previous signature suite section.
The following section describes security considerations that developers implementing this specification should be aware of in order to create secure software.
A simple example of an Pseudonymous 2016 signature:
{ "@context": "https://w3id.org/security/v1", "homeState": "Virginia", "signature": { "type": "PseudonymousSignature2016", "created": "2016-09-22T22:38:03Z", "creator": "https://blue.example.com/keys/1", "claimDefinition": "https://blue.example.com/definitions/drivers-license", "revocationTails": "https://blue.example.com/tails/set-32893", "revocationTailsHash": "urn:sha256:43903bab3b4b2b3b4b4b2bb2b8384ad457", "accumulator": "https://blue.example.com/accumulator/set-32893", "domain": "example.com", "signatureValue": "IKwTJ...E37UsLgs=" } }