Table of Contents
Fetching ...

Nicknames for Group Signatures

Guillaume Quispe, Pierre Jouvelot, Gerard Memmi

TL;DR

Nicknames for Group Signatures (NGS) presents a novel signing scheme that blends Group Signatures with Signatures with Flexible Public Keys to enable auditable anonymous transfers. The authors formalize an NGS security model, provide a concrete SEP-based construction proven secure in the ROM, and instantiate a practical blockchain prototype, NickHat, on Ethereum. Their framework supports nicknames as linked, unlinkable identities that remain verifiable as group members, with opening authorities and verifiers enabling accountable behavior while preserving user privacy. The work targets privacy-preserving, auditable transactions in finance and supply chains, offering a scalable path to real-world deployment with on-chain verification and off-chain computation. Potential future directions include stronger anonymity guarantees, threshold issuance/opening, and user revocation mechanisms to further strengthen practicality and resilience.

Abstract

Nicknames for Group Signatures (NGS) is a new signature scheme that extends Group Signatures (GS) with Signatures with Flexible Public Keys (SFPK). Via GS, each member of a group can sign messages on behalf of the group without revealing his identity, except to a designated auditor. Via SFPK, anyone can create new identities for a particular user, enabling anonymous transfers with only the intended recipient able to trace these new identities. To prevent the potential abuses that this anonymity brings, NGS integrates flexible public keys into the GS framework to support auditable transfers. In addition to introducing NGS, we describe its security model and provide a mathematical construction proved secure in the Random Oracle Model. As a practical NGS use case, we build NickHat, a blockchain-based token-exchange prototype system on top of Ethereum.

Nicknames for Group Signatures

TL;DR

Nicknames for Group Signatures (NGS) presents a novel signing scheme that blends Group Signatures with Signatures with Flexible Public Keys to enable auditable anonymous transfers. The authors formalize an NGS security model, provide a concrete SEP-based construction proven secure in the ROM, and instantiate a practical blockchain prototype, NickHat, on Ethereum. Their framework supports nicknames as linked, unlinkable identities that remain verifiable as group members, with opening authorities and verifiers enabling accountable behavior while preserving user privacy. The work targets privacy-preserving, auditable transactions in finance and supply chains, offering a scalable path to real-world deployment with on-chain verification and off-chain computation. Potential future directions include stronger anonymity guarantees, threshold issuance/opening, and user revocation mechanisms to further strengthen practicality and resilience.

Abstract

Nicknames for Group Signatures (NGS) is a new signature scheme that extends Group Signatures (GS) with Signatures with Flexible Public Keys (SFPK). Via GS, each member of a group can sign messages on behalf of the group without revealing his identity, except to a designated auditor. Via SFPK, anyone can create new identities for a particular user, enabling anonymous transfers with only the intended recipient able to trace these new identities. To prevent the potential abuses that this anonymity brings, NGS integrates flexible public keys into the GS framework to support auditable transfers. In addition to introducing NGS, we describe its security model and provide a mathematical construction proved secure in the Random Oracle Model. As a practical NGS use case, we build NickHat, a blockchain-based token-exchange prototype system on top of Ethereum.

Paper Structure

This paper contains 52 sections, 4 theorems, 3 equations, 2 figures, 1 table, 1 algorithm.

Key Result

lemma 1

Let ${H}$ be modeled as a random oracle. Then, $G_4$ and $G_3$ are indistinguishable under the SXDH assumption for ${\mathbb{G}_2}$.

Figures (2)

  • Figure 1: Oracles for the security model of NGS (the issuer and opener keys $isk, ipk$ and $opk$ are supposed defined)
  • Figure 2: Traceability, Non-frameability, Optimal opening soundness, Opening coherence and Anonymity (from top to bottom) experiments for NGS

Theorems & Definitions (15)

  • definition 1: Digital signature
  • definition 2: Group signature
  • definition 3: Signature with flexible public key
  • definition 4: Simulation-sound extractable SPK
  • definition 5: NGS Scheme
  • definition 6: NGS Correctness
  • definition 7
  • definition 8
  • definition 9
  • definition 10
  • ...and 5 more