''On Anonymity of Group Signatures ''
[
eprint.iacr.org]
this paper answers the question, and the result is that ACJT is fully anonymous (CCA2-secure) in ROM.
Is it right?
Since I couldn't totally agree with the proof.
Edited 1 time(s). Last edit at 19-Jan-2008 02:52 by qlq.