In particular, both papers on Traceable Ring Signatures and Linkable Ring Signatures propose they are fit for the creation of ballots. The Wikipedia Article on Ring Signatures, though, suggests Linkable Ring Signatures can't be used for that purpose. Which is right?
The Wikipedia Article on Ring Signatures, though, suggests Linkable Ring Signatures can't be used for that purpose.
The Wikipedia article doesn't say or imply that. It lists possible applications:
- Linkable Ring Signatures: "... One of the possible applications can be an offline e-cash system."
- Tracable Ring Signatures: "... An e-voting system can be implemented using this protocol."
First, neither claims explicitly that you can create ballots with it, which is only a part of an e-voting system. And then if something is listed for one of them, it doesn't mean that you can create that only with this one.
And then, you have the wrong source for link signatures. Liu and Wong also wrote Linkable ring signatures: Security models and new schemes just one year later, which builds upon your linked paper but refines it. (although I can't find a publicly available version atm)