Paper 2020/018
Triptych: logarithmic-sized linkable ring signatures with applications
Sarang Noether and Brandon Goodell
Abstract
Ring signatures are a common construction used to provide signer ambiguity among a non-interactive set of public keys specified at the time of signing. Unlike early approaches where signature size is linear in the size of the signer anonymity set, current optimal solutions either require centralized trusted setups or produce signatures logarithmic in size. However, few also provide linkability, a property used to determine whether the signer of a message has signed any previous message, possibly with restrictions on the anonymity set choice. Here we introduce Triptych, a family of linkable ring signatures without trusted setup that is based on generalizations of zero-knowledge proofs of knowledge of commitment openings to zero. We demonstrate applications of Triptych in signer-ambiguous transaction protocols by extending the construction to openings of parallel commitments in independent anonymity sets. Signatures are logarithmic in the anonymity set size and, while verification complexity is linear, collections of proofs can be efficiently verified in batches. We show that for anonymity set sizes practical for use in distributed protocols, Triptych offers competitive performance with a straightforward construction.
Note: Fixed notation.
Metadata
- Available format(s)
- Category
- Applications
- Publication info
- Published elsewhere. Minor revision. ESORICS CBT 2020
- Keywords
- ring signaturesdigital signatures
- Contact author(s)
-
sarang noether @ protonmail com
surae noether @ protonmail com - History
- 2021-07-06: last of 8 revisions
- 2020-01-07: received
- See all versions
- Short URL
- https://ia.cr/2020/018
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2020/018, author = {Sarang Noether and Brandon Goodell}, title = {Triptych: logarithmic-sized linkable ring signatures with applications}, howpublished = {Cryptology {ePrint} Archive, Paper 2020/018}, year = {2020}, url = {https://eprint.iacr.org/2020/018} }