1-out-of-n Signatures from a Variety of Keys [chapter]

Masayuki Abe, Miyako Ohkubo, Koutarou Suzuki
2002 Lecture Notes in Computer Science  
This paper addresses how to use public-keys of several different signature schemes to generate 1-out-of-n signatures. Previously known constructions are for either RSA-keys only or DL-type keys only. We present a widely applicable method to construct a 1-out-of-n signature scheme that allows mixture use of different flavors of keys at the same time. The resulting scheme is more efficient than previous schemes even if it is used only with a single type of keys. With all DL-type keys, it yields
more » ... orter signatures than the ones of the previously known scheme based on the witness indistinguishable proofs by Cramer, et al. With all RSA-type keys, it reduces both computational and storage costs compared to that of the Ring signatures by Rivest, et al.
doi:10.1007/3-540-36178-2_26 fatcat:mr2phzb47fef7a6mwz45fcxpx4