Selective-Disclosure in Decentralised Identity: A Comparative Evaluation of BBS+ and SD-JWT

Abstract

This systematic literature review compares two leading selective-disclosure primitives for decentralised identity-BBS+ signatures and Selective-Disclosure JSON Web Tokens (SD-JWT)-to clarify their suitability for privacypreserving credentials. Following Kitchenham's protocol, 226 records from 2017-2025 were screened across IEEE, ACM, SpringerLink, ScienceDirect, IETF and W3C repositories, yielding 31 primary studies with empirical data. Quantitative synthesis shows that BBS+ derived proofs remain constant-size at roughly 140 bytes and verify in about 12 ms on consumer hardware, whereas SD-JWT presentations grow with the number of revealed claims but still verify in under 10 ms for typical twoclaim use cases. Qualitative analysis confirms BBS+ provides strong unlinkability, predicate proofs and zero-knowledge disclosure, while SD-JWT offers seamless integration with existing JOSE/OAuth infrastructures yet carries correlation risk due to stable salted digests. Standardisation progress is comparable: the BBS+ cryptosuite reached W3C Candidate Recommendation in April 2025, and SD-JWT is in late-stage IETF review. The review concludes that privacy-critical scenarios such as age-gated services favour BBS+, whereas high-throughput web applications benefit from SD-JWT; consequently, hybrid wallet support for both formats is recommended. Future research should tackle scalable revocation, post-quantum migration and multi-credential aggregation to sustain long-term trust and interoperability.