Abstract
Traceable ring signatures (TRSs) allow a signer to create a signature that maintains anonymity while enabling traceability if needed. It merges the characteristics of traditional ring signatures with the ability to trace signers, making it ideal for applications that demand both confidentiality and accountability. In a TRS scheme, a ring of potential signers generates a signature on a message without disclosing the actual signer’s identity. However, the identity can be traced if the signer uses the same tag for multiple signatures. This paper introduces a novel formal construction of TRS under universally composable (UC) security. We integrate verifiable random functions (VRFs) and zero-knowledge proofs for membership, employing Pedersen commitments. Our signature schemes maintain a logarithmic size while preserving the UC security guarantees. Additionally, we explore the potential to extend the property of one-time anonymity in TRS to K-time anonymity.
| Original language | English |
|---|---|
| Article number | 59 |
| Journal | Cryptography |
| Volume | 9 |
| Issue number | 3 |
| DOIs | |
| Publication status | Published - Sept 2025 |
| Externally published | Yes |
Keywords
- membership proof
- ring signature
- traceable ring signature
- universal composability
- verifiable random function
- zero-knowledge