Home > Resources > papers > TZ23-Revisiting-BBS

Revisiting BBS Signatures (Tessaro, Zhu 2023)

Last modified: 2026-10-27

DOI: 10.1007/978-3-031-30589-4_24 · URL: https://eprint.iacr.org/2023/275

Summary

Revisits BBS signatures (Eurocrypt 2023): proves the security of a shorter variant whose signature is a single group element plus one scalar, and gives a tight analysis of the corresponding proof of knowledge used for selective disclosure. This is the version standardized in the IRTF CFRG BBS draft. Central to e-ID anonymous credentials, since BBS is the leading pairing-based candidate for unlinkable selective disclosure.

Related resources

• Anonymous Attestation Using the Strong Diffie Hellman Assumption Revisited (Camenisch, Drijvers, Lehmann 2016) (paper, 2016)
• Improved Algebraic MACs and Practical Keyed-Verification Anonymous Credentials (Barki, Brunet, Desmoulins, Traoré 2016) (paper, 2016)
• Short Group Signatures (Boneh, Boyen, Shacham 2004) (paper, 2004)
• Signature Schemes and Anonymous Credentials from Bilinear Maps (Camenisch, Lysyanskaya 2004) (paper, 2004)
• The BBS# protocol: Technical details (Orange 2024) (paper, 2024)