Gerege

by fg0x0 Cryptography The old empire hung a gerege from a rider's belt and every gate let them pass. UB-CENTRAL kept the idea: a bearer proves, in zero knowledge, that their tablet carries the Khan's authority - the tablet itself never crosses the wire, only a seal that it exists. The seal is a Chaum-Pedersen proof of discrete-log equality, made non-interactive and bound to a live gate session.

You arrive with nothing, so the gate stamps you an envoy. No one is issued a Khan tablet, and the Khan pairing is a hard discrete log away.

The scheme is published in full at /docs, and the reference is attached. Open the Khan archive anyway.