Overview
ISO/IEC 20008-3:2024 - "Information security - Anonymous digital signatures - Part 3: Mechanisms using multiple public keys" specifies anonymous digital signature mechanisms where a verifier uses multiple public keys to validate a signature. Part 3 of the ISO/IEC 20008 series describes a general model and a set of concrete mechanisms (including several ring-signature–style constructions) that let a signer form a spontaneous group by combining public keys. The standard defines processes for key generation, signature production and verification, and optional capabilities such as linking, tracing, and threshold signatures. It does not define PKI implementations or certificate exchange procedures.
Key topics and requirements
- General model and requirements: formal model, symbols, and functional/security requirements for multiple-public-key anonymous signatures.
- Key generation: procedures for creating each user’s private and public keys.
- Signature production and verification: step-by-step processes for creating and verifying anonymous (ring-style) signatures using multiple public keys.
- Linking capability: mechanisms that allow detection of whether two signatures were generated by the same signer under specified conditions.
- Tracing capability: mechanisms that permit identification of the true signer given certain inputs (as specified by the mechanism).
- Threshold capability: options where signatures can be produced/verified by subsets of users of a specified size (threshold settings).
- Mechanism variants: multiple mechanisms are specified - some unlinkable, some linkable, some traceable, and some supporting threshold operation.
- Annexes: normative object identifiers and conversion functions; informative numerical examples to aid implementation and testing.
- Scope limitation: the standard explicitly does not define PKI implementations, certificate exchange, or certificate verification protocols.
Applications and who should use it
ISO/IEC 20008-3:2024 is relevant to:
- Cryptographers and security researchers designing anonymous signature schemes and ring-signature-based protocols.
- Security architects and software engineers building privacy-preserving authentication, anonymous voting, whistleblowing platforms, or confidentiality-preserving logging.
- System integrators implementing signature schemes with linking, tracing, or threshold semantics in distributed systems.
- Standards bodies and compliance teams assessing anonymous signature methods and interoperability.
The standard provides formalized, interoperable mechanisms and examples that help implementers choose and adopt anonymous signature solutions while understanding their privacy and accountability trade-offs.
Related standards
- ISO/IEC 20008-1 (principles and requirements for anonymous digital signatures) - defines the two categories referenced.
- Other referenced documents (normative): e.g., ISO/IEC 10116 for block cipher modes where relevant.
Keywords: ISO/IEC 20008-3:2024, anonymous digital signatures, multiple public keys, ring signatures, linking capability, tracing capability, threshold signatures, information security, cryptography.