Mesh Signatures

sion of an extended abstract to be published in Advances in Cryptology—EUROCRYPT 2007, Springer-Verlag, 2007. Available online from the IACR Cryptology ePrint Archive as Report 2007/094. See also: http://www.cs.stanford.edu/∼xb/eurocrypt07b/ We introduce the mesh signature primitive as an anonymous signature that borrows from ring signatures, but with added modularity and a much richer language for expressing signer ambiguity. The language can represent complex access structures, and in particular allows individual signature components to be replaced with modular certificate chains. As a result, withholding one’s public key from view is no longer a shield against being named as a possible cosignatory; and hence, a mesh signature may be used as a ring signature substitute with compulsory enrollment. We give an efficient construction based on bilinear maps in the common random string model. Our mesh signatures have linear size, achieve everlasting perfect anonymity, and as a spec...

• Type: Conference
• Year: 2007
• Where: EUROCRYPT
• Authors: Xavier Boyen
• Keywords: Cryptography, EUROCRYPT 2007, Mesh Signatures, Ring Signatures, Signatures