Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tweaks to privacy considerations section about decoy values. #166

Merged
merged 2 commits into from
Apr 16, 2024
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 10 additions & 10 deletions index.html
Original file line number Diff line number Diff line change
Expand Up @@ -1365,22 +1365,22 @@ <h3>Decoy Values</h3>
[=Issuer=] use of decoy values in status lists has been explored as a mechanism
to increase the privacy of [=subjects=]. While algorithms for employing decoy
values are out of scope for this specification, implementers are advised that
the use of decoy values do not provide privacy gains and can harm privacy in
the use of decoy values does not improve privacy and can harm privacy in
most cases.
</p>
<p>
When status list entry indexes are allocated in a random fashion, which is the
suggested mode of operation for this specification, adding decoys harms privacy
because it reduces the group privacy size by the number of decoys added to the
group. A random allocation of indexes inherently hides the true group size,
ensuring that decoys are not necessary.
When indexes of status list entries are allocated in a random fashion, which is
the suggested mode of operation for this specification, adding decoys harms
privacy because it reduces the group privacy size by the number of decoys added
TallTed marked this conversation as resolved.
Show resolved Hide resolved
to the group. A random allocation of indexes inherently hides the true size of
the group, ensuring that decoys are not necessary.
TallTed marked this conversation as resolved.
Show resolved Hide resolved
</p>
<p>
There might be use cases where decoy values provide benefits. Implementers are
cautioned that no such use cases were clearly identified by the group that
created this specification. As a result, the use of decoys is discouraged for
most use cases, as random allocation of status list entry indexes provides
adequate protection.
cautioned that no such use cases were clearly identifiable by the group that
created this specification. Therefore, the use of decoys is discouraged for
most if not all use cases, as random allocation of status list entry indexes
provides adequate protection.
</p>
</section>

Expand Down
Loading