We propose a ring signature scheme that creates short signatures for large rings. The scheme allows signers to reuse previously created signatures to enlarge the ring size without expanding the size of signature itself. The relation between signatures is a tree structure in which each signature is a node built upon its predecessors. The set of potential signers of a node grows exponentially with the tree height while the size of the signature may remain even constant. We give the specific example of the scheme built on the top of Schnorr ring signatures. We prove its unconditional anonymity and unforgeability in ROM.
展开▼
