This document specifies two variants of the two-message issuance protocol for Privacy Pass tokens: one that produces tokens that are