International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Threshold Signatures with Private Accountability

Chelsea Komlo , University of Waterloo
Dan Boneh , Stanford University
Search ePrint
Search Google
Presentation: Slides
Conference: CRYPTO 2022
Abstract: Existing threshold signature schemes come in two flavors: (i) fully private, where the signature reveals nothing about the set of signers that generated the signature, and (ii) accountable, where the signature completely identifies the set of signers. In this paper we propose a new type of threshold signature, called TAPS, that is a hybrid of privacy and accountability. A TAPS signature is fully private from the public's point of view. However, an entity that has a secret tracing key can trace a signature to the threshold of signers that generated it. A TAPS makes it possible for an organization to keep its inner workings private, while ensuring that signers are accountable for their actions. We construct a number of TAPS schemes. First, we present a generic construction that builds a TAPS from any accountable threshold signature. This generic construction is not efficient, and we next focus on efficient schemes based on standard assumptions. We build two efficient TAPS schemes (in the random oracle model) based on the Schnorr signature scheme. We conclude with a number of open problems relating to efficient TAPS
Video from CRYPTO 2022
  title={Threshold Signatures with Private Accountability},
  author={Chelsea Komlo and Dan Boneh},