Skip to content
Blockchain

Why does presenting my credential to ten verifiers let them silently map my life?

83

Möglichkeit

Every SD-JWT credential, the dominant format being deployed in EUDI Wallets across EU member states in 2026, carries a single issuer signature that is identical across all presentations. Any two verifiers who receive the same credential can share that token and link both visits to the same person. BBS+ with randomizable signatures prevents this correlation, but it is computationally heavier and production wallet support is thin. An IEEE EuroS&P 2026 paper confirms that issuer-verifier unlinkability is structurally impossible in salted-hash selective disclosure schemes like SD-JWT without issuing fresh credential batches per presentation, an operational burden no major deployment has solved. The hundreds of millions of wallets rolling out under eIDAS 2.0 today will silently correlate holders across every verifier they interact with for the lifetime of the credential.

Warum es wichtig ist

Unlinkable presentation is the primitive that makes selective disclosure mean privacy rather than just granularity, and the dominant deployed format cannot provide it.

Wie ich die Chance bewerte

Der Opportunity Score ist meine persönliche Einschätzung, keine Messung: wie stark es schmerzt, wie oft es auftritt und wie wenig heute existiert, um es zu lösen. Ein höherer Wert bedeutet, dass ich es für lohnender halte, es umzusetzen.

Schweregrad8/10

Wie viel Schmerz es verursacht, wenn es auftritt.

Häufigkeit9/10

Wie oft Menschen tatsächlich darauf stoßen.

Whitespace8/10

Wie wenig gute Werkzeuge dafür heute existieren.

Weitere lösungswürdige Probleme