Security in Communication Networks

Volume 2576 of the series Lecture Notes in Computer Science pp 268-289


A Signature Scheme with Efficient Protocols

  • Jan CamenischAffiliated withIBM Research Zurich Research Laboratory
  • , Anna LysyanskayaAffiliated withComputer Science Department, Brown University Providence

* Final gross prices may vary according to local VAT.

Get Access


Digital signature schemes are a fundamental cryptographic primitive, of use both in its own right, and as a building block in cryptographic protocol design. In this paper, we propose a practical and provably secure signature scheme and show protocols (1) for issuing a signature on a committed value (so the signer has no information about the signed value), and (2) for proving knowledge of a signature on a committed value. This signature scheme and corresponding protocols are a building block for the design of anonymity-enhancing cryptographic systems, such as electronic cash, group signatures, and anonymous credential systems. The security of our signature scheme and protocols relies on the Strong RSA assumption. These results are a generalization of the anonymous credential system of Camenisch and Lysyanskaya.