1. A method for attestation comprising generating a user attestation-signature value for use with a verification computer, the user attestation-signature value corresponding to at least one attribute (A, B, C, D), each with an attribute value (w, x, y, z), none, one, or more of the attribute values (w, y) remaining anonymous for transactions performable by a user device having a security module with the verification computer, the step of generating comprising the steps of: providing a user public key and a proof value that demonstrates that the user public key was validly derived from a module public key of the security module; receiving from an attester computer (I) an attestation value having the at least one attribute (A, B, C, D) with its attribute value (w, x, y, z), none, one or more of the attribute values (x, y) remaining unknown to the attester computer, the attestation value being derived from an attester secret key, a user public key, and none, one, or more attester determined attribute values (w, z), the user public key inherently comprising none, one, or more user determined attribute values (x, y), and (II) at least one of the attester determined attribute values (w, z); and deriving the user attestation-signature value from the attestation value and a security module attestation value provided by the security module, wherein it is verifiable whether or not (i) the user attestation-signature value was validly derived from the security module attestation value and the attestation value, and that (ii) the attestation value is associated with a subset (B, D) of at least one attribute, each attribute in the subset (B, D) having a revealed attribute value (x, z).