Abstract:

By using the bilinear property of the Weil pairing defined on elliptic curves and Euler’s criterion, a group signature scheme is presented. In the scheme, each signer is only responsible for signing of a particular section of the message, and then the signature is sent to the system administrator. A group signature of the message is created by the system administrator finally, which can be verified by the corresponding public key without revealing the whole message. The cost of managing and storing the public key certificate could be efficiently decreased with this scheme, and the signature size is only about a quarter of the Guillou-Quisquater signature.

Key words: group signature； Weil pairing； Euler&rsquo, s criterion