RSA Blind Signatures
draft-irtf-cfrg-rsa-blind-signatures-14

Received changes through RFC Editor sync (created alias RFC 9474, changed abstract to 'This document specifies an RSA-based blind signature protocol. RSA blind signatures were first introduced by Chaum for untraceable payments. A signature that is output from this protocol can be verified as an RSA-PSS signature.

This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.', changed pages to 27, changed standardization level to Informational, changed state to RFC, added RFC published event at 2023-10-10, changed IRTF state to Published RFC)

(Via drafts-eval@iana.org): IESG/Authors/ISE:

The IANA Functions Operator has reviewed draft-irtf-cfrg-rsa-blind-signatures-12 and has the following comments:

We understand that this document doesn't require any registry actions.

While it's often helpful for a document's IANA Considerations section to remain in place upon publication even if there are no actions, if the authors strongly prefer to remove it, we do not object.

If this assessment is not accurate, please respond as soon as possible.

For definitions of IANA review states, please see:

https://datatracker.ietf.org/help/state/draft/iana-review

Thank you,

Amanda Baber
IANA Operations Manager

Technical Summary
This document defines a set of four protocols for computing the RSA-based blind signatures, named RSABSSA. Implementation recommendations are given, as well as information about the security of the defined protocols in standard and extended security models. The blind signatures protocols are of great importance for various applications; RSA-based variants are well-studied and ready for usage in practice.
The Security Considerations section contains a lot of important recommendations that should help implementers to take various potential attack vectors into account.
This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Research Group Summary
After adopting the document after the presentation at the CFRG meeting at IETF 110 it was presented in CFRG meetings at IETF 111 and IETF 114.
There was a Research Group Last Call for the draft in 2022 (October-December). There were no major concerns raised during the RGLC. A number of minor concerns raised during the RGLC were addressed by the authors. The authors have answered the questions raised during the Research Group Last Call, no questions have remained unanswered. Crypto Review Panel review was solicited in September 2022. The review was provided by Bjoern Tackmann. Comments from that review were addressed in -05.

Document Quality
There are at least five publicly available implementations: the Python reference implementation [1], the C [1] and Zig [2] implementations with dependencies on OpenSSL/BoringSSL, the Rust [4] and Go (Cloudflare, CIRCL) [5] implementations. There is also at least one private interoperable implementation for Private Access Tokens [6].
All authors of the document have confirmed that they are not aware of any IPRs related to the document.

Personnel
Stanislav Smyshlyaev is the Document Shepherd.
Colin Perkins is the IRTF Chair.

[1] https://github.com/cfrg/draft-irtf-cfrg-blind-signatures/blob/master/poc/rsabssa.py

[2] https://github.com/jedisct1/blind-rsa-signatures

[3] https://github.com/jedisct1/zig-blind-rsa-signatures

[4] https://github.com/jedisct1/rust-blind-rsa-signatures

[5] https://github.com/cloudflare/circl/tree/master/blindsign

[6] https://developer.apple.com/videos/play/wwdc2022/10077/

Technical Summary
This document defines a set of four protocols for computing the RSA-based blind signatures, named RSABSSA. Implementation recommendations are given, as well as information about the security of the defined protocols in standard and extended security models. The blind signatures protocols are of great importance for various applications; RSA-based variants are well-studied and ready for usage in practice.
The Security Considerations section contains a lot of important recommendations that should help implementers to take various potential attack vectors into account.
This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Research Group Summary
After adopting the document after the presentation at the CFRG meeting at IETF 110 it was presented in CFRG meetings at IETF 111 and IETF 114.
There was a Research Group Last Call for the draft in 2022 (October-December). There were no major concerns raised during the RGLC. A number of minor concerns raised during the RGLC were addressed by the authors. The authors have answered the questions raised during the Research Group Last Call, no questions have remained unanswered. Crypto Review Panel review was solicited in September 2022. The review was provided by Bjoern Tackmann. Comments from that review were addressed in -05.

Document Quality
There are at least five publicly available implementations: the Python reference implementation [1], the C [1] and Zig [2] implementations with dependencies on OpenSSL/BoringSSL, the Rust [4] and Go (Cloudflare, CIRCL) [5] implementations. There is also at least one private interoperable implementation for Private Access Tokens [6].
All authors of the document have confirmed that they are not aware of any IPRs related to the document.

Personnel
Stanislav Smyshlyaev is the Document Shepherd.
Colin Perkins is the IRTF Chair.

[1] https://github.com/cfrg/draft-irtf-cfrg-blind-signatures/blob/master/poc/rsabssa.py
[2] https://github.com/jedisct1/blind-rsa-signatures
[3] https://github.com/jedisct1/zig-blind-rsa-signatures
[4] https://github.com/jedisct1/rust-blind-rsa-signatures
[5] https://github.com/cloudflare/circl/tree/master/blindsign
[6] https://developer.apple.com/videos/play/wwdc2022/10077/

Technical Summary
This document defines a set of four protocols for computing the RSA-based blind signatures, named RSABSSA. Implementation recommendations are given, as well as information about the security of the defined protocols in standard and extended security models. The blind signatures protocols are of great importance for various applications; RSA-based variants are well-studied and ready for usage in practice.
The Security Considerations section contains a lot of important recommendations that should help implementers to take various potential attack vectors into account.
This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Research Group Summary
After adopting the document after the presentation at the CFRG meeting at IETF 110 it was presented in CFRG meetings at IETF 111 and IETF 114.
There was a Research Group Last Call for the draft in 2022 (October-December). There were no major concerns raised during the RGLC. A number of minor concerns raised during the RGLC were addressed by the authors. The authors have answered the questions raised during the Research Group Last Call, no questions have remained unanswered. Crypto Review Panel review was solicited in September 2022. The review was provided by Bjoern Tackmann. Comments from that review were addressed in -05.

Document Quality
There are at least five publicly available implementations: the Python reference implementation [1], the C [1] and Zig [2] implementations with dependencies on OpenSSL/BoringSSL, the Rust [4] and Go (Cloudflare, CIRCL) [5] implementations. There is also at least one private interoperable implementation for Private Access Tokens [6].
All authors of the document have confirmed that they are not aware of any IPRs related to the document.

Personnel
Stanislav Smyshlyaev is the Document Shepherd.
Colin Perkins is the IRTF Chair.

[1] https://github.com/cfrg/draft-irtf-cfrg-blind-signatures/blob/master/poc/rsabssa.py
[2] https://github.com/jedisct1/blind-rsa-signatures
[3] https://github.com/jedisct1/zig-blind-rsa-signatures
[4] https://github.com/jedisct1/rust-blind-rsa-signatures
[5] https://github.com/cloudflare/circl/tree/master/blindsign
[6] https://developer.apple.com/videos/play/wwdc2022/10077/

Technical Summary
This document defines a set of four protocols for computing the RSA-based blind signatures, named RSABSSA. Implementation recommendations are given, as well as information about the security of the defined protocols in standard and extended security models. The blind signatures protocols are of great importance for various applications; RSA-based variants are well-studied and ready for usage in practice.
The Security Considerations section contains a lot of important recommendations that should help implementers to take various potential attack vectors into account.
This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.

Research Group Summary
After adopting the document after the presentation at the CFRG meeting at IETF 110 it was presented in CFRG meetings at IETF 111 and IETF 114.
There was a Research Group Last Call for the draft in 2022 (October-December). There were no major concerns raised during the RGLC. A number of minor concerns raised during the RGLC were addressed by the authors. The authors have answered the questions raised during the Research Group Last Call, no questions have remained unanswered. Crypto Review Panel review was solicited in September 2022. The review was provided by Bjoern Tackmann. Comments from that review were addressed in -05.

Document Quality
There are at least five publicly available implementations: the Python reference implementation [1], the C [1] and Zig [2] implementations with dependencies on OpenSSL/BoringSSL, the Rust [4] and Go (Cloudflare, CIRCL) [5] implementations. There is also at least one private interoperable implementation for Private Access Tokens [6].
All authors of the document have confirmed that they are not aware of any IPRs related to the document.

Personnel
Stanislav Smyshlyaev is the Document Shepherd.
Colin Perkins is the IRTF Chair.

[1] https://github.com/cfrg/draft-irtf-cfrg-blind-signatures/blob/master/poc/rsabssa.py
[2] https://github.com/jedisct1/blind-rsa-signatures
[3] https://github.com/jedisct1/zig-blind-rsa-signatures
[4] https://github.com/jedisct1/rust-blind-rsa-signatures
[5] https://github.com/cloudflare/circl/tree/master/blindsign
[6] https://developer.apple.com/videos/play/wwdc2022/10077/