International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Quasi-Efficient Revocation of Group Signatures

Giuseppe Ateniese
Dawn Song
Gene Tsudik
Search ePrint
Search Google
Abstract: A group signature scheme allows any group member to sign on behalf of the group in an anonymous and unlinkable fashion. In the event of a dispute, a designated trusted entity can reveal the identity of the signer. Group signatures are claimed to have many useful applications such as voting and electronic cash. A number of group signature schemes have been proposed to-date. However, in order for the whole group signature concept to become practical and credible, the problem of secure and efficient group member revocation must be addressed. In this paper, we construct a new revocation method for group signatures based on the signature scheme by Ateniese et al. at Crypto 2000. This new method represents an advance in the state-of-the-art since the only revocation schemes proposed thus far are either: 1) based on implicit revocation and the use of fixed time periods, or 2) require the signature size to be linear in the number of revoked members. Our method, in contrast, does not rely on time periods, offers constant-length signatures and constant work for the signer.
  title={Quasi-Efficient Revocation of Group Signatures},
  booktitle={IACR Eprint archive},
  keywords={public-key cryptography / Group signatures, revocation, dynamic groups},
  note={Financial Cryptography 2002, February 2002, Hamilton, Bermuda. 11779 received 20 Nov 2001, last revised 1 Apr 2002},
  author={Giuseppe Ateniese and Dawn Song and Gene Tsudik},