Paper 2020/683

Logarithmic-Size (Linkable) Threshold Ring Signatures in the Plain Model

Abida Haque, Stephan Krenn, Daniel Slamanig, and Christoph Striecks


Ring signatures are a cryptographic primitive that allow a signer to anonymously sign messages on behalf of an ad-hoc group of $N$ potential signers (the so-called ring). This primitive has attracted significant research since its introduction by Rivest et al. (ASIACRYPT'01), but until recently, no construction was known that was both (i) compact, i.e., the signature size is sub-linear in $N$, and (ii) in the plain model, i.e., secure under standard hardness assumptions without requiring heuristic or setup assumptions. The first construction in this most desirable setting, where reducing trust in external parties is the primary goal, was only recently presented by Backes et al. (EUROCRYPT'19). An interesting generalization of ring signatures are $t$-out-of-$N$ ring signatures for $t\geq 1$, also known as threshold ring (thring) signatures (Bresson et al., CRYPTO'02). For threshold ring signatures, non-linkable sub-linear-size constructions are not even known under heuristic or setup assumptions. In this work, we propose the first sub-linear thring signatures and prove them secure in the plain model. While our constructions are inspired by the template underlying the Backes et al. construction, they require novel ideas and techniques. Our scheme is non-interactive, and has strong inter-signer anonymity, meaning that signers do not need to know the other signers that participate in a threshold signing. We then present a linkable counterpart to our non-linkable construction. Our thring signatures can easily be adapted to achieve the recently introduced notions of flexibility (Okamoto et al., EPRINT'18) as well as claimability and repudiability (Park and Sealfon, CRYPTO'19). (Th)Ring signatures and, in particular, their linkable versions have recently drawn significant attention in the field of privacy-friendly cryptocurrencies. We discuss applications that are enabled by our strong inter-signer anonymity, demonstrating that thring signatures are interesting from a practical perspective also.

Available format(s)
Public-key cryptography
Publication info
A major revision of an IACR publication in PKC 2022
(linkable) threshold ring signaturescompact sizeplain model
Contact author(s)
ahaque3 @ ncsu edu
stephan krenn @ ait ac at
daniel slamanig @ ait ac at
christoph striecks @ ait ac at
2021-12-24: revised
2020-06-09: received
See all versions
Short URL
Creative Commons Attribution


      author = {Abida Haque and Stephan Krenn and Daniel Slamanig and Christoph Striecks},
      title = {Logarithmic-Size (Linkable) Threshold Ring Signatures in the Plain Model},
      howpublished = {Cryptology ePrint Archive, Paper 2020/683},
      year = {2020},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.