### Triptych: logarithmic-sized linkable ring signatures with applications

Sarang Noether and Brandon Goodell

##### Abstract

Ring signatures are a common construction used to provide signer ambiguity among a non-interactive set of public keys specified at the time of signing. Unlike early approaches where signature size is linear in the size of the signer anonymity set, current optimal solutions either require centralized trusted setups or produce signatures logarithmic in size. However, few also provide linkability, a property used to determine whether the signer of a message has signed any previous message, possibly with restrictions on the anonymity set choice. Here we introduce Triptych, a family of linkable ring signatures without trusted setup that is based on generalizations of zero-knowledge proofs of knowledge of commitment openings to zero. We demonstrate applications of Triptych in signer-ambiguous transaction protocols by extending the construction to openings of parallel commitments in independent anonymity sets. Signatures are logarithmic in the anonymity set size and, while verification complexity is linear, collections of proofs can be efficiently verified in batches. We show that for anonymity set sizes practical for use in distributed protocols, Triptych offers competitive performance with a straightforward construction.

Note: Fixed notation.

Available format(s)
Category
Applications
Publication info
Published elsewhere. MINOR revision.ESORICS CBT 2020
Keywords
ring signaturesdigital signatures
Contact author(s)
sarang noether @ protonmail com
surae noether @ protonmail com
History
2021-07-06: last of 8 revisions
See all versions
Short URL
https://ia.cr/2020/018

CC BY

BibTeX

@misc{cryptoeprint:2020/018,
author = {Sarang Noether and Brandon Goodell},
title = {Triptych: logarithmic-sized linkable ring signatures with applications},
howpublished = {Cryptology ePrint Archive, Paper 2020/018},
year = {2020},
note = {\url{https://eprint.iacr.org/2020/018}},
url = {https://eprint.iacr.org/2020/018}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.