{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,4]],"date-time":"2026-09-04T17:26:49Z","timestamp":1788542809572,"version":"build-2803163510"},"publisher-location":"Cham","reference-count":46,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031171420","type":"print"},{"value":"9783031171437","type":"electronic"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-17143-7_7","type":"book-chapter","created":{"date-parts":[[2022,9,23]],"date-time":"2022-09-23T04:04:22Z","timestamp":1663905862000},"page":"125-144","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":12,"title":["Unlinkable Delegation of\u00a0WebAuthn Credentials"],"prefix":"10.1007","author":[{"given":"Nick","family":"Frymann","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel","family":"Gardham","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mark","family":"Manulis","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,9,24]]},"reference":[{"key":"7_CR1","doi-asserted-by":"crossref","unstructured":"An, J.H., Dodis, Y., Rabin, T.: On the security of joint signature and encryption. In: EUROCRYPT (2002)","DOI":"10.1007\/3-540-46035-7_6"},{"key":"7_CR2","doi-asserted-by":"crossref","unstructured":"Barbosa, M., Boldyreva, A., Chen, S., Warinschi, B.: Provable Security Analysis of FIDO2 (2021)","DOI":"10.1007\/978-3-030-84252-9_5"},{"key":"7_CR3","unstructured":"Boldyreva, A., Palacio, A., Warinschi, B.: Secure proxy signature schemes for delegation of signing rights. JoC (2012)"},{"key":"7_CR4","doi-asserted-by":"crossref","unstructured":"Brendel, J., Fischlin, M., G\u00fcnther, F., Janson, C.: PRF-ODH: relations, instantiations, and impossibility results. In: CRYPTO (2017)","DOI":"10.1007\/978-3-319-63697-9_22"},{"key":"7_CR5","unstructured":"Certicom Research: SEC 1: Elliptic Curve Cryptography. Tech. Rep. (2009)"},{"key":"7_CR6","doi-asserted-by":"crossref","unstructured":"Chaum, D.: Security without identification: transaction systems to make big brother obsolete. ACM (1985)","DOI":"10.1145\/4372.4373"},{"key":"7_CR7","doi-asserted-by":"crossref","unstructured":"Chaum, D., van Heyst, E.: Group signatures. In: EUROCRYPT (1991)","DOI":"10.1007\/3-540-46416-6_22"},{"key":"7_CR8","doi-asserted-by":"crossref","unstructured":"Crites, E.C., Lysyanskaya, A.: Delegatable anonymous credentials from mercurial signatures. In: CT-RSA (2019)","DOI":"10.1007\/978-3-030-12612-4_27"},{"key":"7_CR9","unstructured":"Culnane, C., Newton, C.J.P., Treharne, H.: Technical report on a virtual CTAP2 webauthn authenticator. arXiv preprint arXiv:2108.04131"},{"key":"7_CR10","doi-asserted-by":"crossref","unstructured":"Derler, D., Hanser, C., Slamanig, D.: Privacy-enhancing proxy signatures from non-interactive anonymous credentials. In: CODASPY (2014)","DOI":"10.1007\/978-3-662-43936-4_4"},{"key":"7_CR11","doi-asserted-by":"crossref","unstructured":"Eastlake, D., Hansen, T.: US Secure Hash Algorithms (SHA and HMAC-SHA). Tech. rep. (2006)","DOI":"10.17487\/rfc4634"},{"key":"7_CR12","unstructured":"Fersch, M.: The Provable Security of Elgamal-type Signature Schemes, Ph.D. thesis, Ruhr University Bochum, Germany (2018)"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"Fersch, M., Kiltz, E., Poettering, B.: On the Provable security of (EC)DSA signatures. In: ACM CCS (2016)","DOI":"10.1145\/2976749.2978413"},{"key":"7_CR14","unstructured":"FIDO: Client to Authenticator Protocol (CTAP). Tech. rep. (2018)"},{"key":"7_CR15","doi-asserted-by":"crossref","unstructured":"Frymann, N., Gardham, D., Kiefer, F., Lundberg, E., Manulis, M., Nilsson, D.: Asynchronous remote key generation: an analysis of Yubico\u2019s proposal for w3c Webauthn. In: ACM CCS (2020)","DOI":"10.1145\/3372297.3417292"},{"key":"7_CR16","doi-asserted-by":"crossref","unstructured":"Frymann, N., Gardham, D., Manulis, M.: Unlinkable Delegation of WebAuthn Credentials. Cryptology ePrint Archive, Paper 2022\/303 (2022)","DOI":"10.1007\/978-3-031-17143-7_7"},{"key":"7_CR17","doi-asserted-by":"crossref","unstructured":"Fuchsbauer, G., Pointcheval, D.: Anonymous proxy signatures. In: SCN (2008)","DOI":"10.1007\/978-3-540-85855-3_14"},{"key":"7_CR18","doi-asserted-by":"crossref","unstructured":"Hanser, C., Slamanig, D.: Blank digital signatures. In: ASIACCS (2013)","DOI":"10.1145\/2484313.2484324"},{"key":"7_CR19","doi-asserted-by":"crossref","unstructured":"Hanser, C., Slamanig, D.: Warrant-hiding delegation-by-certificate proxy signature schemes. In: INDOCRYPT (2013)","DOI":"10.1007\/978-3-319-03515-4_5"},{"key":"7_CR20","doi-asserted-by":"crossref","unstructured":"Hardt, D.: The OAuth 2.0 Authorization Framework. Tech. rep. (2012)","DOI":"10.17487\/rfc6749"},{"key":"7_CR21","doi-asserted-by":"crossref","unstructured":"Jiang, Y., Kong, F., Ju, X.: Lattice-Based Proxy Signature. In: CIS (2010)","DOI":"10.1109\/CIS.2010.88"},{"key":"7_CR22","doi-asserted-by":"crossref","unstructured":"Johnson, R., Molnar, D., Song, D., Wagner, D.: Homomorphic signature schemes. In: CT-RSA (2002)","DOI":"10.1007\/3-540-45760-7_17"},{"key":"7_CR23","doi-asserted-by":"crossref","unstructured":"Kim, S., Park, S., Won, D.: Proxy signatures. ICS, Revisited. In (1997)","DOI":"10.1007\/BFb0028478"},{"key":"7_CR24","doi-asserted-by":"crossref","unstructured":"Krawczyk, H., Bellare, M., Canetti, R.: HMAC: Keyed-hashing for message authentication. Tech. rep. (1997)","DOI":"10.17487\/rfc2104"},{"key":"7_CR25","doi-asserted-by":"crossref","unstructured":"Krawczyk, H., Eronen, P.: HMAC-based Extract-and-Expand Key Derivation Function (HKDF). Tech. rep. (2010)","DOI":"10.17487\/rfc5869"},{"key":"7_CR26","unstructured":"Kumar, A., Lundberg, E., Jones, J., Jones, M., Hodges, J.: Web Authentication. Tech. rep., W3C (2021). https:\/\/www.w3.org\/TR\/webauthn-2\/"},{"key":"7_CR27","unstructured":"Kunke, J., Wiefling, S., Ullmann, M., Iacono, L.L.: Evaluation of account recovery strategies with FIDO2-based passwordless authentication (2021)"},{"key":"7_CR28","unstructured":"Mambo, M., Usuda, K., Okamoto, E.: Proxy signatures: delegation of the power to sign messages. IEICE FECCS (1996)"},{"key":"7_CR29","doi-asserted-by":"crossref","unstructured":"M\u2019Raihi, D., Bellare, M., Hoornaert, F., Naccache, D., Ranen, O.: HOTP: an HMAC-based one-time password algorithm. Tech. rep. (2005)","DOI":"10.17487\/rfc4226"},{"key":"7_CR30","doi-asserted-by":"crossref","unstructured":"M\u2019Raihi, D., Machani, S., Pei, M., Rydell, J.: TOTP: Time-based one-time password algorithm. Tech. rep. (2011)","DOI":"10.17487\/rfc6238"},{"key":"7_CR31","doi-asserted-by":"crossref","unstructured":"Mulliner, C., Borgaonkar, R., Stewin, P., Seifert, J.P.: SMS-based one-time passwords: attacks and defense. In: DIMVA (2013)","DOI":"10.1007\/978-3-642-39235-1_9"},{"key":"7_CR32","doi-asserted-by":"crossref","unstructured":"Naik, N., Jenkins, P.: An analysis of open standard identity protocols in cloud computing security paradigm. In: ASC\/PiCom\/DataCom\/CyberSciTech (2016)","DOI":"10.1109\/DASC-PICom-DataCom-CyberSciTec.2016.85"},{"key":"7_CR33","unstructured":"NIST: Digital Signature Standard (DSS). Tech. rep. (2013)"},{"key":"7_CR34","doi-asserted-by":"crossref","unstructured":"Pearman, S., et al.: let\u2019s go in for a closer look: observing passwords in their natural habitat. In: CCS (2017)","DOI":"10.1145\/3133956.3133973"},{"key":"7_CR35","unstructured":"Ragouzis, N., Hughes, J., Philpott, R., Maler, E., Madsen, P., Scavo, T.: Security Assertion Markup Language (SAML) V2.0 Technical Overview. Tech. rep., OASIS Open (2008)"},{"key":"7_CR36","doi-asserted-by":"crossref","unstructured":"Rivest, R.L., Shamir, A., Tauman, Y.: How to leak a secret. In: ASIACRYPT (2001)","DOI":"10.1007\/3-540-45682-1_32"},{"key":"7_CR37","unstructured":"Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., Mortimore, C.: OpenID connect core 1.0 incorporating errata. Tech. rep., OpenID Foundation (2014)"},{"key":"7_CR38","doi-asserted-by":"crossref","unstructured":"Schaad, J.: CBOR Object Signing and Encryption (COSE). RFC 8152 (2017)","DOI":"10.17487\/RFC8152"},{"key":"7_CR39","unstructured":"Shum, K., Wei, V.K.: A strong proxy signature scheme with proxy signer privacy protection. In: Workshops on Enabling Technologies (2002)"},{"key":"7_CR40","doi-asserted-by":"crossref","unstructured":"Siriwardena, P.: OpenID Connect (OIDC). In: Advanced API Security (2020)","DOI":"10.1007\/978-1-4842-2050-4"},{"key":"7_CR41","unstructured":"Srinivas, S., Balfanz, D., Tiffany, E.: Universal 2nd Factor (U2F) Overview. Tech. rep. (2014)"},{"key":"7_CR42","doi-asserted-by":"crossref","unstructured":"Steinfeld, R., Bull, L., Zheng, Y.: Content extraction signatures. In: ICISC (2001)","DOI":"10.1007\/3-540-45861-1_22"},{"key":"7_CR43","doi-asserted-by":"crossref","unstructured":"Tan, Z., Liu, Z.: Provably secure delegation-by-certification proxy signature schemes. In: InfoSecu (2004)","DOI":"10.1145\/1046290.1046299"},{"key":"7_CR44","unstructured":"Wu, K.l., Zou, J., Wei, X.H., Liu, F.Y.: Proxy group signature: a new anonymous proxy signature scheme. In: ICML (2008)"},{"key":"7_CR45","doi-asserted-by":"crossref","unstructured":"Yu, Y., Mu, Y., Susilo, W., Sun, Y., Ji, Y.: Provably secure proxy signature scheme from factorization. MCM (2012)","DOI":"10.1016\/j.mcm.2011.09.040"},{"key":"7_CR46","doi-asserted-by":"crossref","unstructured":"Yu, Y., Xu, C., Huang, X., Mu, Y.: An efficient anonymous proxy signature scheme with provable security. CSI (2009)","DOI":"10.1016\/j.csi.2008.05.003"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2022"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-17143-7_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,4]],"date-time":"2024-10-04T13:04:51Z","timestamp":1728047091000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-17143-7_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031171420","9783031171437"],"references-count":46,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-17143-7_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"24 September 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2022.compute.dtu.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"562","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"104","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}