Does a system exist where it is possible to verify a signature is from a public key in a specific set of public keys, but also not know which key it was?
The idea being you know a member of a group signed the message without reveling who it was.
$\begingroup$
$\endgroup$
Add a comment
|
3 Answers
$\begingroup$
$\endgroup$
Yes: https://en.wikipedia.org/wiki/Ring_signature
$\color{white}{I needed twenty-five more characters.}$
$\begingroup$
$\endgroup$
Depending on what you are looking for, group signatures may also be relevant.
answered May 10, 2017 at 0:13
$\begingroup$
$\endgroup$
Group signatures and ring signatures are of course good answers but note that if you don't want traceability or linkability you can just give everybody the same key.
