Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There's the well-known question on whether to sign or encrypt first. However, if instead a message is to be ring-signed such that either recipient could be the actual signer, is there any scheme that combines signing and encrypting in one "atomic" step?

share|improve this question

Yes, like there are conventional signcryption schemes combining digital signatures with encryption into a single primitive, there are also ring signcryption schemes that realize the same for ring signatures and encryption. Look for instance here or just ask Google scholar.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.