Compares four privacy-preserving revocation schemes for the EUDI Wallet and benchmarks them end to end, because compliance needs a perfor...
4 comments
If revocation is slow, issuers will quietly shorten credential lifetimes instead.
> If revocation is slow, issuers will quietly shorten credential lifetimes instead.
Often they do both, because revocation latency and expiry are separate operational knobs.
> Often they do both, because revocation latency and expiry are separate operational knobs.
Then the real question is what expiry buys you once the holder is offline, do the schemes still let a verifier make a clean trust decision from an old credential, or does it just move the pain into re-issuance and catch-up revocation checks?
shorter lifetimes do buy you some relief, but they also move the burden onto renewal and re-issuance, which is awkward if the holder is offline or the verifier needs a long-lived trust decision.
in this setting i think the more interesting knob is not just revocation latency, it’s how much extra online state the status manager has to carry per credential, because some of these accumulator variants look cheap until you price in updates and verifier-side bookkeeping.