[PDF] Top 20 Constant Size Traceable Ring Signature Scheme without Random Oracles

... Ring signature [1,2,3,4,5,6,7] allows ring member to hide his identifying information to a ring when ring member signs any message, thus ring signature only reveals the ... See full document

... traditional ring signatures is the size of the sig- ...blind ring signatures e.g. [18, 37, 54] and most existing traditional ring signatures ...whose size grows linearly with the ... See full document

... Ring signature schemes, introduced by Rivest, Shamir and Tauman [1], allow a signer to form a group without a cen- tral authority and sign messages on behalf of the ...the ring ... See full document

... with constant signature ...able ring signature scheme with O( √ n) signature size, from pairing ...linkable ring signature with unconditional anonymity, he ... See full document

... Nominative Signature is a useful tool in situations where a signature has to be created jointly by two parties, a nominator (signer) and a nominee (user), while only the user can verify and prove to a third ... See full document

... group signature schemes have been proposed, most of them are constructed on ...group signature scheme without pairings under the model of verifier-local revocation, which is based on the ... See full document

... ID-based signature (IBS) scheme by making use of bilinear ...IBS scheme that improved Paterson’s scheme on both efficiency of computation and signature size while the security of ... See full document

... as ring signatures [19, 20], universal designated verifier signatures (UDVS) [8, 9, 14, 21, 24, 27], multi-designated verifier signatures [13, 15], and identity-based des- ignated verifier signatures (IBDVS)[4, ... See full document

... a signature scheme with the tightest security- reduction among known constant-size signature schemes secure under the computational Diffie-Hellman (CDH) ...parameter without ... See full document

... in ring signature scheme no need of any co-operation among the ...this scheme re- lies on Integer factorization ...a signature scheme like RSA or ...the scheme is inspired ... See full document

... a constant-size IKE scheme from simple computational assump- ...IKE scheme is that an adversary can get various keys for a target identity I ∗ , whereas the adversary cannot get a secret key ... See full document

... a random looking vector in F m ...variables without constant terms such that P(s) = ...a random seed. This reduces the size of the public key by a large factor (see Table ... See full document

... as ring signatures [18, 20], universal designated verifier sig- natures (UDVS) [6, 7, 12, 21, 24, 27], multi-designated verifier signatures [11, 13], and identity- based designated verifier signatures (IBDVS)[3, ... See full document

... asymmetric setting [24] to be able to instantiate GS commitment scheme under SXDH assumption. Apparently for composite order groups, SGH instantiation of GS scheme in symmetric setting could have been the ... See full document

... accountable ring signature ...decryption scheme to reveal the signer’s iden- ...the signature. The size of the signature in their scheme grows linearly with that of the ... See full document

... oABE scheme, when the adversary receives a ciphertext of which she is not a legal recipient, she will be unable to learn anything about the identities of the legal recipients (let alone the contents of the ... See full document

... aggregate signature scheme, which was proposed by Boneh et ...a signature scheme which allows to aggregate n signatures on n distinct messages from n distinct users into a single ...aggregate ... See full document

... group signature from lattices was introduced by Gordon et ...their scheme is of great theoretical interest, its public key and signature have sizes N · O(n e 2 ), for security parameter n, and for ... See full document

... the Ring-TESLA security reduction and because, in the case of the parameters targeting 128 bits of security, the practical security is insufficient against modern costing methodologies such in [6] by Ducas et ... See full document

... the signature that could identify him ...the signature which could lead to a linkage between a signature and its sign request ...group signature [16] and their security requires random ... See full document