ISO/IEC 20008-3:2024

This document specifies anonymous digital signature mechanisms in which a verifier uses multiple public keys to verify a digital signature. This document provides: —     a general description of an anonymous digital signature mechanism using multiple public keys; —     a variety of mechanisms that provide such anonymous digital signatures. For each mechanism, this document specifies the process for: —     generating the private key and public key of each user; —     producing signatures; —     verifying signatures; —     linking signatures (if the mechanism supports linking); —     tracing signatures (if the mechanism supports tracing); —     producing signatures with threshold capability (if the mechanism supports a threshold capability); —     verifying signatures with threshold capability (if the mechanism supports a threshold capability). This document does not define the implementation of a public key infrastructure (PKI) and the means for distinct entities to exchange, extract and verify their respective public key certificates.