Context
public sourceKirocred's public repository describes a system for issuing verifiable credentials while keeping credential contents private and allowing holders to prove authenticity to verifiers.
Problem
public sourceCredentials need to be verifiable without creating a public on-chain link between a holder's identity and the credential contents.
Architecture and decisions
public sourceThe README describes hashed attribute commitments, Merkle roots published on Starknet, encrypted packages stored on IPFS, and wallet-decoupled key derivation using the STARK curve.
Implementation evidence
public sourceThe public repository contains separate backend, frontend, and contracts packages, with TypeScript/Express, Next.js, and Cairo/Starknet called out in its architecture and technology sections.
Tradeoffs and limitations
public sourceThe project explicitly distinguishes its commitment and encryption design from zero-knowledge proofs. The current README also records a planned organization-specific key derivation change to reduce possible correlation across organizations.
Limitations and open evidence
pending- No adoption or production-use claim is made.
- The public README identifies organization-specific key salting as future work because the current derived keypair can theoretically be correlated across organizations.