Lovesh Harchandani

Hi, > Does this library contain any OPRF implementations? If not, are there plans to include some in the future? No. > I'd like to be able to prove that...

> So in my setting, the user id id certified in the credential is low entropy (you can consider this a passport number, which is essentially guessable). Still we want...

> (For that reason, thresholdizing the issuer seems absolutely necessary. As far as I can see, the thresholdized issuer protocol has not been implemented yet, correct?) Correct, it hasn't been....

I found an OPRF with committed inputs in [this paper](https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7961985) which allows oblivious evaluation of DY PRF on a committed input. Its described in steps 1 and 2 of the...

> Nice to hear. Looking forward to that. Mind outlining what's the differences? It will be based on OT based multiplication, likely [this one](https://github.com/docknetwork/crypto/blob/main/oblivious_transfer/src/ot_based_multiplication/dkls19_batch_mul_2p.rs) since we already do that for...

> What signature are you referring to here? I was referring to the SyRA signature (what SyRA calls user secret key) and optionally BBS signature (when you have other attributes...

> I think it might work as well. The setup would change a bit. Like every application using the anonymous voting service would have to run their own CI (instead...

Hi @matthiasgeihs . Sorry but I forgot to share that the threshold SyRA implementation has been added [here](https://github.com/docknetwork/crypto/blob/main/syra/src/threshold_issuance.rs).

@matthiasgeihs Please check [this](https://github.com/docknetwork/crypto/blob/main/short_group_sig/src/threshold_weak_bb_sig.rs#L218). Here a share of the message (`id` in your case) is passed but not the whole message. In practice the user would still like to convince...

@ppoliani The problem is that `compute_membership_witness ` is being called on a value that is not part of the accumulator. As @mark-moir pointed out, `compute_membership_witness` is called by a trusted...