– Authenticate RPs: no over-asking
– Unobservability: keys on user devices
– Selective disclosure: minimal attributes
– Unlinkability: ZKP-based anonymous credentials
– Deniability: designated-verifier ZKPs
[1] https://media.ccc.de/v/38c3-eu-s-digital-identity-systems-re...
[2] >>45359074