GHOSTKEY
Privacy infrastructure / 001

Prove your credential.
Keep your identity private.

A research platform for selective disclosure, unlinkable presentations, and proofs that reveal only what matters.

/ Credential laboratory

Control the reveal.

This is a simulated credential flow. No real identity checks are performed and no issuer is trusted by default.

Sample credential

Research access pass

Disclosure surface40%

Presentation preview

What the verifier receives

Selective presentation2 / 5 claims
Membership statusActive member
Expiration date2027-04-30
Simulated / locally generated

/ Lifecycle simulator

Issue. Store. Present. Verify.

01

ISSUE

Issuer signs claims

02

STORE

Holder keeps credential

03

PRESENT

Holder chooses what to show

04

VERIFY

Verifier checks the proof

Verification result

Signature valid

Expiration

Valid until 2027-04-30

Revocation status

Not implemented in demo

/ Unlinkability research

Same proof.
Different context.

Repeated identifiers can let separate interactions become linkable. Pairwise presentation identifiers reduce that signal — but changing an identifier alone is not a complete privacy guarantee.

Repeated identifier

session_7d9f...2a1c
↓ same signal
session_7d9f...2a1c

Easy to correlate across relying parties.

Pairwise identifier

present_04b1...19e0
↓ different context
present_a82c...77f4

Less direct correlation between presentations.

Also consider: metadata · issuer behavior · credential design

/ Research notes

Read the thinking.

01Credential architecture

How an issuer, holder, and verifier exchange a credential without a universal identity.

02Selective disclosure

Reveal only the claims required for a decision — not the credential around them.

03Issuer trust

A valid signature proves origin. It does not make an issuer trustworthy by default.

04Revocation & replay

Status checks and fresh presentation challenges help prevent stale or copied proofs.