[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-149158-105":3,"doc-detail-149158-en":80,"detail-sidebar-cat-0-en-105":97},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":73,"head_meta":75,"extra_data":77,"updated_unix":79},105,"en","dualdory-logarithmic-verifier-linkable-ring-signatures-through-preprocessing","DualDory - Logarithmic-Verifier Linkable Ring Signatures through Preprocessing","","A linkable ring signature enables anonymous group signing while allowing detection of multiple signatures from the same user. It supports privacy-sensitive applications such as e-voting and e-cash, where scalability demands short signatures and fast verification. Existing efficient constructions rely on a trusted authority or an accumulator approach requiring trusted setup. This work builds the first linkable ring signature with logarithmic signature size and verification without trusted mechanisms, using discrete-log assumptions and bilinear maps.",{"@graph":14,"@context":72},[15,34,55],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/dualdory-logarithmic-verifier-linkable-ring-signatures-through-preprocessing/149158/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/dualdory-logarithmic-verifier-linkable-ring-signatures-through-preprocessing/149158.png","ImageObject",300,407,{"name":42,"@type":43},"WPS_1786070896","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-11-05","2026-08-27",true,{"@type":52,"interactionType":53,"userInteractionCount":33},"InteractionCounter",{"@type":54},"ViewAction",{"@type":56,"mainEntity":57},"FAQPage",[58,64,68],{"name":59,"@type":60,"acceptedAnswer":61},"What does a linkable ring signature provide in addition to anonymity?","Question",{"text":62,"@type":63},"It lets signers remain anonymous on behalf of a group while enabling verifiers to detect whether the same user produced multiple signatures.","Answer",{"name":65,"@type":60,"acceptedAnswer":66},"Why are short signatures with fast verification important for large-scale systems?",{"text":67,"@type":63},"Systems with many users require efficiency so verification remains practical while maintaining privacy and anonymity guarantees.",{"name":69,"@type":60,"acceptedAnswer":70},"What is the main contribution of DualDory compared with prior work?",{"text":71,"@type":63},"DualDory achieves logarithmic signature size and logarithmic verification without requiring any trusted mechanism, improving over DualRing by integrating Dory preprocessing arguments.","https://schema.org",{"og:url":32,"og:type":74,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":76,"canonical":32},"index,follow",{"doc_id":78,"site_id":7},149158,1787794855,{"code":4,"msg":81,"data":82},"success",{"doc_id":78,"user_id":83,"nickname":42,"user_avatar":84,"doc_module":4,"category_id":85,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":86,"file_id":87,"file_url":88,"file_type":89,"file_size":90,"view_count":33,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":91,"language":92,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":93,"faqs":94,"seo_title":95,"seo_description":12,"update_tm":79,"read_time":96,"preview_page_count":4},549768072016,"https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",8,"DualDory: Logarithmic-Verifier Linkable Ring Signatures  \nthrough Preprocessing  \nJonathan Bootle 1 , Kaoutar Elkhiyaoui 1 , Julia Hesse* 1 , and Yacov Manevich2  \n1 IBM Research-Zurich  \n{jbt,kao,[jhs](jhs}@zurich. ibm. com)[}](jhs}@zurich. ibm. com)[@zurich. ibm. com](jhs}@zurich. ibm. com)  \n2 IBM Research-Haifa  \n[yacovm@il. ibm. com](yacovm@il. ibm. com)  \nAugust 1, 2023  \nAbstract  \nA linkable ring signature allows a user to sign anonymously on behalf of a group while ensuring that multiple signatures from the same user are detected. Applications such as privacypreserving e-voting and e-cash can leverage linkable ring signatures to significantly improve privacy and anonymity guarantees. To scale to systems involving large numbers of users, short signatures with fast verification are a must. Concretely efficient ring signatures currently rely on a trusted authority maintaining a master secret, or follow an accumulator-based approach that requires a trusted setup.  \nIn this work, we construct the first linkable ring signature with both logarithmic signature size and verification that does not require any trusted mechanism. Our scheme, which relies on discrete-log type assumptions and bilinear maps, improves upon a recent concise ring signature called DualRing by integrating improved preprocessing arguments to reduce the verification time from linear to logarithmic in the size of the ring. Our ring signature allows signatures tobe linked based on what message is signed, ranging from linking signatures on any message to only signatures on the same message.  \nWe provide benchmarks for our scheme and prove its security under standard assumptions. The proposed linkable ring signature is particularly relevant to use cases that require privacypreserving enforcement of threshold policies in a fully decentralized context, and e-voting.  \n1 Introduction  \nGroup signatures [17] and ring signatures [19] enable members of a group to sign messages anonymously. That is, a verifier of a valid signature only learns that the signature was produced by a member of the group and nothing else; in particular, the verifier cannot tell if two signatures were produced by the same party or not. The main difference between group and ring signatures is  \n* The author was supported by the Swiss National Science Foundation (SNSF) under the AMBIZIONE grant“Cryptographic Protocols for Human Authentication and the IoT”  \nthat group signatures rely on a designated group manager to maintain group membership for the purposes of accountability. More specifically, the group manager is responsible for user enrollment and revocation so that later it can de-anonymize signatures. On the other hand, ring signatures allow for a spontaneous group formation, where a user signs anonymously by creating a group that contains its public key and the public keys of others. The absence of a group manager, ensures that ring signatures can never be de-anonymized; a property that is crucial in applications where unconditional anonymity is desired, e.g., whistle blowing and secret ballot. It also allows ring signatures to be used in decentralized applications without additional setup or assumptions.  \nA useful extension to ring signatures is linkability, which ensures that a signer cannot sign twice without being detected. A prominent application of linkability is e-voting where a voter should not cast a vote more than once, and linkability allows easy detection. Linkability can also be leveraged to obtain threshold ring signatures by simply concatenating the required threshold of individual signatures. Threshold ring signatures are useful for regulated and decentralized e-cash where transactions exceeding a certain amount can only be committed if t independent endorsers approve the transaction. The identities of the endorsers should not be disclosed as that may leak information about the origin of the transaction, and thus, calling for privacy-preserving threshold policy enforce","cbCaiap5IeLr9nFV","https://ap.wps.com/l/cbCaiap5IeLr9nFV","pdf",580778,26,"English","# Abstract\n# Introduction\n## Background: group and ring signatures\n## Linkability and applications\n## Efficient verification with transparent setup\n## DualDory overview","[{\"question\":\"What does a linkable ring signature provide in addition to anonymity?\",\"answer\":\"It lets signers remain anonymous on behalf of a group while enabling verifiers to detect whether the same user produced multiple signatures.\"},{\"question\":\"Why are short signatures with fast verification important for large-scale systems?\",\"answer\":\"Systems with many users require efficiency so verification remains practical while maintaining privacy and anonymity guarantees.\"},{\"question\":\"What is the main contribution of DualDory compared with prior work?\",\"answer\":\"DualDory achieves logarithmic signature size and logarithmic verification without requiring any trusted mechanism, improving over DualRing by integrating Dory preprocessing arguments.\"}]","DualDory - Logarithmic-Verifier Linkable Ring Signatures through Preprocessing | PDF",66,{"code":4,"msg":81,"data":98},[99,103,107,111,116,121,126,129,134,137,141],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":100,"show_sort_weight":101,"slug":102},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":104,"show_sort_weight":105,"slug":106},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":108,"show_sort_weight":109,"slug":110},"Exam",70,"exam",{"id":112,"doc_module":4,"doc_module_name":25,"category_name":113,"show_sort_weight":114,"slug":115},5,"Comic",60,"comic",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":118,"show_sort_weight":119,"slug":120},6,"Technology",50,"technology",{"id":122,"doc_module":4,"doc_module_name":25,"category_name":123,"show_sort_weight":124,"slug":125},7,"Healthcare",40,"healthcare",{"id":85,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":127,"slug":128},30,"research-report",{"id":130,"doc_module":4,"doc_module_name":25,"category_name":131,"show_sort_weight":132,"slug":133},9,"Religion & Spirituality",20,"religion-spirituality",{"id":132,"doc_module":4,"doc_module_name":25,"category_name":135,"show_sort_weight":132,"slug":136},"World Cup","world-cup",{"id":138,"doc_module":4,"doc_module_name":25,"category_name":139,"show_sort_weight":138,"slug":140},10,"Lifestyle","lifestyle",{"id":142,"doc_module":4,"doc_module_name":25,"category_name":143,"show_sort_weight":112,"slug":144},19,"General","general"]