Is it possible to derive a dsa key-pair based on two private keys from different/independent "Certificate Authorities" (ca1 and ca2) to sign s.th. which then verifies only that the signature is a child of ca1 and ca2 but not which of the keys, that have been originally issued by the ca's has been used? Thus anonymized signature?
ca1 = certificate authority 1 ca2 = certificate authority 2 cert1 = public certificate of ca1 cert2 = public certificate of c2 privkey1 = private key issued by ca1 privkey2 = private key issued by ca2 privkey = getprivkey(privkey1, privkey2) = private key derived from ca1 & ca2 datasig = signature of data package - signed with privkey dsaproof = digital signature algorithm proof function
Is the following possible?
True = dsaproof(datasig, cert1) True = dsaproof(datasig, cert2)