Hwang and Cheng proposed the first strong designated-verifier ring signature scheme providing one-out-of-all signer anonymity to hide the actual signer's identity. Their scheme also provides signer admission to admit who the actual signer is. However, the computation and communication costs caused by the signer admission are heavy because their scheme needs all ring members' Schnorr promises. To reduce the computation and communication costs without damaging one-out-of-all signer anonymity, an efficient strong designated-verifier ring signature scheme providing maximal signer anonymity is proposed and provides the same security properties. Our scheme is more efficient than Hwang and Cheng's scheme.
Journal of Applied Science and Engineering=淡江理工學刊 15(4), pp.381-390