Home > Resources > papers > PS16-Randomizable-Sigs

Short Randomizable Signatures (Pointcheval, Sanders 2016)

Last modified: 2026-10-27

DOI: 10.1007/978-3-319-29485-8_7 · URL: https://eprint.iacr.org/2015/525

Summary

Introduces Pointcheval–Sanders (PS) signatures (CT-RSA 2016), a pairing-based multi-message signature that can be re-randomized, so a holder can present a fresh-looking signature each time and prove knowledge of the signed messages efficiently. Signatures are constant-size (two group elements). PS signatures are, together with BBS, a main building block of anonymous credential systems (e.g. Coconut) considered for e-ID.

Related resources

• Issuer-Hiding Attribute-Based Credentials (Bobolz, Eidens, Krenn, Ramacher, Samelin 2021) (paper, 2021)
• Practical Post-Quantum Signatures for Privacy (Argo, Güneysu, Jeudy, Land, Roux-Langlois, Sanders 2024) (paper, 2024)
• Short Group Signatures (Boneh, Boyen, Shacham 2004) (paper, 2004)
• Signature Schemes and Anonymous Credentials from Bilinear Maps (Camenisch, Lysyanskaya 2004) (paper, 2004)