Eliminate serial number attribute about wabisabi HOT 7 CLOSED

So you use the randomness of the value commitment as serial number, but you don't reaveal it directly, you show G_r^r with some zkp and the server stores G_r^r. That's nice and looks like it would work.

from wabisabi.

@nothingmuch was referring to a different idea that I broke on Slack. It was not related to this.

from wabisabi.

it saves a group elements per credential request, makes the iparams smaller (eliminating y_s), eliminates a group element per credential showing (C_s) and has roughly the same overhead for the proof of representation we already have where s is a public input.

from wabisabi.

That's a neat trick!
But, is it useful? It seems that there is more computational cost [although little] to prove knowledge of the serial number, rather than just showing it.

Can you please explain the benefits of this approach?

from wabisabi.

@nothingmuch were you referring on Slack to this idea that it doesn't work?

from wabisabi.

Yes @nopara73, afaik.
@RubenSomsen apparently broke it somehow.

from wabisabi.

Then it can be closed with an explanation.

from wabisabi.