Linkability analysis of some blind signature schemes

Abstract

Blind signature is a cryptographical technique and allows a user to obtain signatures from an authority on any document, in such a way that the authority learns nothing about the message that is being signed. The blindness is an important property which distinguishes the blind signature from other signature schemes. In this work, we analyze security of two ID-based blind signature schemes [1,16] and a blind signature scheme[20] based on witness indistinguishable signature, and show that the three schemes don't satisfy blindness, in other words, the signer is able to link a valid message-signature pair obtained by some user. It means that the three blind signature schemes are insecure. © Springer-Verlag Berlin Heidelberg 2007.