scope:

This document specifies anonymous digital signature mechanisms in which a verifier makes use of multiple public keys to verify a digital signature.

This document provides

- a general description of an anonymous digital signature mechanism using multiple public keys, and

- a variety of mechanisms that provide such anonymous digital signatures.

For each mechanism, this document specifies

- the process for generating the private key and public key of each user,

- the process for producing signatures,

- the process for verifying signatures,

- the process for linking signatures (if the mechanism supports linking),

- the process for tracing signatures (if the mechanism supports tracing),

- the process for producing signatures with threshold capability (if the mechanism supports a threshold capability), and

- the process for verifying signatures with threshold capability (if the mechanism supports a threshold capability).

This document does not define the implementation of a PKI and the means for distinct entities to exchange, extract and verify their respective public key certificates.