Paper 2013/413

Policy-Based Signatures

Mihir Bellare and Georg Fuchsbauer


We introduce policy-based signatures (PBS), where a signer can only sign messages conforming to some authority-specified policy. The main requirements are unforgeability and privacy, the latter meaning that signatures not reveal the policy. PBS offers value along two fronts: (1)~On the practical side, they allow a corporation to control what messages its employees can sign under the corporate key. (2)~On the theoretical side, they unify existing work, capturing others forms of signatures as special cases or allowing them to be easily built. Our work focuses on definitions of PBS, proofs that this challenging primitive is realizable for arbitrary policies, efficient constructions for specific policies, and a few representative applications.

Available format(s)
Publication info
A major revision of an IACR publication in PKC 2014
Signaturespoliciesgroup signaturesNIZKsGroth-Sahai proofsdelegation.
Contact author(s)
georg fuchsbauer @ ist ac at
2014-01-22: last of 2 revisions
2013-06-25: received
See all versions
Short URL
Creative Commons Attribution


      author = {Mihir Bellare and Georg Fuchsbauer},
      title = {Policy-Based Signatures},
      howpublished = {Cryptology ePrint Archive, Paper 2013/413},
      year = {2013},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.