Logarithmic-Size Post-Quantum Linkable Ring Signatures Based on Aggregation Operations

TL;DR

This paper introduces a new post-quantum linkable ring signature scheme that improves efficiency and privacy for applications like cryptocurrencies.

Contribution

A novel logarithmic-size post-quantum linkable ring signature scheme using aggregation operations instead of zero-knowledge proofs.

Findings

The proposed scheme achieves logarithmic-scale signing and verification operations using a Merkle tree.

It outperforms existing schemes with significantly lower signing and verification times and smaller signature sizes.

The aggregation process ensures strong privacy protection without leaking information about signers.

Abstract

Linkable ring signatures are a type of ring signature scheme that can protect the anonymity of signers while allowing the public to verify whether the same signer has signed the same message multiple times. This functionality makes linkable ring signatures suitable for applications such as cryptocurrencies and anonymous voting systems, achieving the dual goals of identity privacy protection and misuse prevention. However, existing post-quantum linkable ring signature schemes often suffer from issues such as excessive linear data growth the adoption of post-quantum signature algorithms, and high circuit complexity resulting from the use of post-quantum zero-knowledge proof protocols. To address these issues, a logarithmic-size post-quantum linkable ring signature scheme based on aggregation operations is proposed. The scheme constructs a Merkle tree from ring members’ public keys via a hash algorithm to achieve logarithmic-scale signing and verification operations. Moreover, it introduces, for the first time, a post-quantum aggregate signature scheme to replace post-quantum zero-knowledge proof protocols, thereby effectively avoiding the construction of complex circuits. Scheme analysis confirms that the proposed scheme meets the correctness requirements of linkable ring signatures. In terms of security, the scheme satisfies the anonymity, unforgeability, and linkability requirements of linkable ring signatures. Moreover, the aggregation process does not leak information about the signing members, ensuring strong privacy protection. Experimental results demonstrate that, when the ring size scales to 1024 members, our scheme outperforms the existing Dilithium-based logarithmic post-quantum ring signature scheme, with nearly 98.25% lower signing time, 98.90% lower verification time, and 99.81% smaller signature size.

Figures