Information Security and Cryptography Research Group

Efficient Group Signature Schemes for Large Groups

Jan Camenisch and Markus Stadler

Advances in Cryptology — CRYPTO '97, Lecture Notes in Computer Science, Springer-Verlag, vol. 1294, pp. 410–424, Aug 1997.

A group signature scheme allows members of a group to sign messages on the group's behalf such that the resulting signature does not reveal their identity. Only a designated group manager is able to identify the group member who issued a given signature. Previously proposed realizations of group signature schemes have the undesirable property that the length of the public key is linear in the size of the group. In this paper we propose the first group signature scheme whose public key and signatures have length independent of the number of group members and which can therefore also be used for large groups. Furthermore, the scheme allows the group manager to add new members to the group without modifying the public key. The realization is based on methods for proving the knowledge of signatures.

BibTeX Citation

    author       = {Jan Camenisch and Markus Stadler},
    title        = {Efficient Group Signature Schemes for Large Groups},
    editor       = {Burton S. Kaliski Jr.},
    booktitle    = {Advances in Cryptology --- CRYPTO~'97},
    pages        = {410--424},
    series       = {Lecture Notes in Computer Science},
    volume       = {1294},
    year         = {1997},
    month        = {8},
    publisher    = {Springer-Verlag},

Files and Links