Revocable Group Signatures with Compact Revocation List Using Vector Commitments

Shahidatul SADIAH  Toru NAKANISHI  

IEICE TRANSACTIONS on Fundamentals of Electronics, Communications and Computer Sciences   Vol.E100-A   No.8   pp.1672-1682
Publication Date: 2017/08/01
Online ISSN: 1745-1337
DOI: 10.1587/transfun.E100.A.1672
Type of Manuscript: PAPER
Category: Cryptography and Information Security
privacy,  group signatures,  revocation,  vector commitments,  

Full Text: PDF(734KB)>>
Buy this Article

A group signature allows any group member to anonymously sign a message. One of the important issues is an efficient membership revocation. The scheme proposed by Libert et al. has achieved O(1) signature and membership certificate size, O(1) signing and verification times, and O(log N) public key size, where N is the total number of members. However the Revocation List (RL) data is large, due to O(R) signatures in RL, where R is the number of revoked members. The scheme proposed by Nakanishi et al. achieved a compact RL of O(R/T) signatures for any integer T. However, this scheme increases membership certificate size by O(T). In this paper, we extend the scheme proposed by Libert et al., by reducing the RL size to O(R/T) using a vector commitment to compress the revocation entries, while O(1) membership certificate size remains.