Hacker News new | ask | show | jobs
by notfed 552 days ago
I really doubt any cryptographic primitive can solve this; what's stopping me from lending my "proof" to my little brother?
2 comments

If you have digital id signed with government keys (like passport) you would prove that person has ID where the age is above 18, attached to this photo and that all the info comes from a single government sanctioned id.

You don’t need to conceal all the data. Just the bits you don’t want to leak.

If you're going with a "digital id signed with government keys", then we don't need a ZKP, we can just use digital signatures. A certificate from the government that says "the holder of this id is 18+" is all the information that needs to be contained in the certificate.
That is a moving target. I could be 17 today and 18 tomorrow. Also it is not feasable to make all the different variations of ID but they do give out single one with all the info.

[1]https://ethresear.ch/t/zero-knowledge-proofs-of-identity-usi...

Part of the problem is that "normal" digital signatures create correlation factors that can be used to track/profile users, whereas a zero knowledge proof (over knowledge of a valid signature) could prevent this.
The app shows your face on it and says it is 21+.
How is this different from showing a non-digital driver's license that says you're 21+? Underage kids borrow each others' driver's licenses, so they can borrow each others' phones.
I'm failing to parse your argument here. We're talking about an example usecase of zkProofs as a way to better explain the technology. We're not trying to solve the problem with every different random way to sneak into a club that you can think of.

I actually was a club owner in San Francisco at one point in time. Even went through the ABC training. Got sued at one point by the ABC cause they snuck someone in under age. No system is perfect.

But, I'll tell you that having someone show me a cell phone with my picture on it, nicely large and backlit and saying I'm 21, is a great solution to requiring people to present an ID that could come from one of 1000 places.

> But, I'll tell you that having someone show me a cell phone with my picture on it, nicely large and backlit and saying I'm 21, is a great solution to requiring people to present an ID that could come from one of 1000 places.

I agree, but I already have a California DMV app that does this. It doesn't need a ZKP.

> I'm failing to parse your argument here. We're talking about an example usecase of zkProofs as a way to better explain the technology.

Indeed my argument is that ZKP seems unnecessary in this example, and yes it's extremely hard for me to appreciate the usefulness of a ZKP with an example where it seems useless.

> I agree, but I already have a California DMV app that does this. It doesn't need a ZKP.

What happens when you aren't in California? Or what happens when someone from outside of California comes to a bar.

> Indeed my argument is that ZKP seems unnecessary in this example, and yes it's extremely hard for me to appreciate the usefulness of a ZKP with an example where it seems useless.

Then go find better examples if you're this interested.