Paper 2002/173

Efficient Group Signatures without Trapdoors

Giuseppe Ateniese and Breno de Medeiros


Group signature schemes enable unlinkably anonymous authentication, in the same fashion that digital signatures provide the basis for strong authentication protocols. This paper introduces the first group signature scheme with constant-size parameters that does not require any group member, including group managers, to know trapdoor secrets. This novel type of group signature scheme allows public parameters to be shared among organizations, and are useful when several distinct groups must interact and exchange information about individuals while protecting their privacy.

Note: This revised version corrects the proof of security of the modified Nyberg-Rueppel signature and contains some changes in the writing and presentation of the results.

Available format(s)
Cryptographic protocols
Publication info
Published elsewhere. This is a REVISED version of the paper that appeared in ASIACRYPT 2003.
Contact author(s)
ateniese @ cs jhu edu
2004-04-21: last of 6 revisions
2002-11-13: received
See all versions
Short URL
Creative Commons Attribution


      author = {Giuseppe Ateniese and Breno de Medeiros},
      title = {Efficient Group Signatures without Trapdoors},
      howpublished = {Cryptology ePrint Archive, Paper 2002/173},
      year = {2002},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.