Abstract

This document extends the U-Prove Cryptographic Specification by specifying set membership proofs. This allows proving that a U-Prove attribute value is within a set of values without disclosing which one.