A Practical and Provably Secure Coalition-Resistant Group Signature Scheme


A group signature scheme allows a group member to sign messages anonymously on behalf of the group. However, in the case of a dispute, the identity of a signature’s originator can be revealed (only) by a designated entity. The interactive counterparts of group signatures are identity escrow schemes or group identification scheme with revocable anonymity. This work introduces a new provably secure group signature and a companion identity escrow scheme that are significantly more efficient than the state of the art. In its interactive, identity escrow form, our scheme is proven secure and coalition-resistant under the strong RSA and the decisional Diffie-Hellman assumptions. The security of the noninteractive variant, i.e., the group signature scheme, relies additionally on the Fiat-Shamir heuristic (also known as the random oracle model).

DOI: 10.1007/3-540-44598-6_16

Extracted Key Phrases

Citations per Year

847 Citations

Semantic Scholar estimates that this publication has 847 citations based on the available data.

See our FAQ for additional information.

Cite this paper

@inproceedings{Ateniese2000APA, title={A Practical and Provably Secure Coalition-Resistant Group Signature Scheme}, author={Giuseppe Ateniese and Jan Camenisch and Marc Joye and Gene Tsudik}, booktitle={CRYPTO}, year={2000} }