How to Leak a Secret: Theory and Applications of Ring Signatures

By R. Rivest, Adi Shamir, Yael Tauman Kalai. Essays in Memory of Shimon Even, 2001

1,379 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/bf7267a08fa0347f825b2c3cefc85f13f1ce772e

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

An Efficient Signature Scheme from Bilinear Pairings and Its Applications (2004, methodology): “Ring signature schemes were proposed by Rivest, Shamir, and Tauman [21].”
RingCT 2.0: A Compact Accumulator-Based (Linkable Ring Signature) Protocol for Blockchain Cryptocurrency Monero (2017, background): “, [28, 35, 1]) allows a member of a group to sign messages on behalf of the group without revealing his identities, i.”
A Review on the Use of Blockchain for the Internet of Things (2018, background): “• Proof-of-Personhood (PoP) [143] is a consensus mechanism that makes use of ring signatures [144] and collective signing [145] to bind physical to virtual identities in a way that anonymity is preserved.”
Towards Post-Quantum Blockchain: A Review on Blockchain Cryptography Resistant to Quantum Computing Attacks (2020, background): “They allow for specifying a set of possible signers without revealing who of them actually produced a signature [230].”
Proactively Accountable Anonymous Messaging in Verdict (2012, methodology): “We are exploring the use of anonymous authentication techniques [22, 29, 41] to enable Verdict clients to “sign on” and prove membership in the group without revealing to the Verdict servers (or to the adversary) which specific group members are online at any given time.”
A Decentralized Privacy-Preserving Healthcare Blockchain for IoT (2019, background): “Ring Signature was originally proposed by Rivest in 2001 [34].”
Dissent: accountable anonymous group messaging (2010, background): “While group and ring signatures [4,11,30] can anonymously authenticate messages trans-”
Attribute-Based Signatures (2011, background): “Leaking secrets The classical application for which the notion of ring-signatures was developed by Rivest, Shamir and Tauman [30] is “leaking secrets,” that we used as the motivating example in the opening of this paper.”
Linkable Spontaneous Anonymous Group Signature for Ad Hoc Groups (Extended Abstract) (2004, methodology): “[29] formalized this kind of signature to be ‘Ring Signature’ because their construction of the signature forms a ring structure.”
Oruta: Privacy- Preserving Public Auditing for Shared Data in the Cloud (2018, background): “However, traditional ring signatures [4], [5] cannot be directly used into public auditing mechanisms, because these ring signature schemes do not support blockless verification.”
Bitcoin and Beyond: A Technical Survey on Decentralized Digital Currencies (2016, methodology): “In order to further increase the diﬃculty of tracing payments and coin ﬂows, CryptoNote uses ring signatures [Rivest et al. 2001].”
Privacy-Preserving Solutions for Blockchain: Review and Challenges (2019, background): “Given a group of members with private and public keys, ring signature [109] is a type of digital signature performed by one of the members of the group, but the signature itself does not reveal who signed it.”
On Signatures of Knowledge (2006, background): “Other Applications Our simplest example is a ring signature [20].”
CryptoNote v 2.0 (2013, background): “The next version called a ring signature, introduced by Rivest et al. in [34], was an autonomous scheme without Group Manager and anonymity revocation.”
Off-the-record communication, or, why not to use PGP (2004, background): “But the possibility that Bob is offline could very well be the reason Alice is using email in the first place! However, there is a solution Alice can use in this case, called ring signatures [30].”
1-out-of-n Signatures from a Variety of Keys (2002, methodology): “[4] extends the scheme of [21] to a threshold scheme with the cost of O(2 log n) efficiency for threshold t.”