Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The U-Prove SDK has the following comment: (link)

// 1: CA-RA split (a party trusted by the issuer provides the gamma value)

Given that the Gamma value (if provided) overrides the Attributes value, does that mean the issuer can be separated into two IdPs that can have dedicated purposes?


  1. One secure IdP to verify the attributes
  2. A second IdP generate the UProve token with no knowledge of the attributes

... and the only communication between the IdPs is the "gamma" value?

share|improve this question
Why the downvote? CA and similar technologies are on topic – LamonteCristo Jul 30 '13 at 13:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.