1

The difference is that in homomorphic signatures anyone can compute on the signatures, whereas in functional signatures only the party holding the functional secret key $sk_f$ can compute $f$ on signatures (signed by master secret key corresponding to $sk_f$)


Only top voted, non community-wiki answers of a minimum length are eligible