{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T12:21:12Z","timestamp":1780316472860,"version":"3.54.1"},"reference-count":15,"publisher":"Springer Science and Business Media LLC","issue":"8","license":[{"start":{"date-parts":[[2023,4,29]],"date-time":"2023-04-29T00:00:00Z","timestamp":1682726400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,4,29]],"date-time":"2023-04-29T00:00:00Z","timestamp":1682726400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Des. Codes Cryptogr."],"published-print":{"date-parts":[[2023,8]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Blind signatures are a decades-old privacy enhancing technology. It is not always clearly understood that blind signatures actually possess two separate properties: the intuitive understanding that the message to be signed is hidden from the signer, and the fact that the resulting signature is unlinkable (meaning that the signer cannot later tell in which session it created a particular signature). The question is: how exactly should these properties be defined, and can they be defined in a natural way such that they are mutually independent yet together imply blindness? In this paper we study this question, present formal definitions for <jats:italic>message indistinguishability<\/jats:italic> and <jats:italic>signature unlinkability<\/jats:italic> (and a few more related ones), and study their relationships. We show that these two properties are indeed mutually independent. Unfortunately their union is not equivalent to blindness in what appear to be only pathological cases.<\/jats:p>","DOI":"10.1007\/s10623-023-01228-2","type":"journal-article","created":{"date-parts":[[2023,4,29]],"date-time":"2023-04-29T08:02:18Z","timestamp":1682755338000},"page":"2705-2721","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Two faces of blindness"],"prefix":"10.1007","volume":"91","author":[{"given":"Jaap-Henk","family":"Hoepman","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,4,29]]},"reference":[{"key":"1228_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"244","DOI":"10.1007\/BFb0034851","volume-title":"Advances in Cryptology-ASIACRYPT 96","author":"M Abe","year":"1996","unstructured":"Abe M., Fujisaki E.: How to date blind signatures. In: Kim K., Matsumoto T. (eds.) Advances in Cryptology-ASIACRYPT 96, vol. 1163, pp. 244\u2013251. Lecture Notes in Computer Science. Springer, New York (1996)."},{"key":"1228_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"271","DOI":"10.1007\/3-540-44598-6_17","volume-title":"Advances in Cryptology-CRYPTO 2000","author":"M Abe","year":"2000","unstructured":"Abe M., Okamoto T.: Provably secure partially blind signatures. In: Bellare M. (ed.) Advances in Cryptology-CRYPTO 2000, vol. 1880, pp. 271\u2013286. Lecture Notes in Computer Science. Springer, New York (2000)."},{"key":"1228_CR3","doi-asserted-by":"crossref","unstructured":"Bellare M., Namprempre C.: Authenticated encryption: relations among notions and analysis of the generic composition paradigm. Cryptology ePrint Archive, 2000\/025:25 (2000).","DOI":"10.1007\/3-540-44448-3_41"},{"key":"1228_CR4","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/5931.001.0001","volume-title":"Rethinking Public Key Infrastructures and Digital Certificates; Building in Privacy","author":"S Brands","year":"2000","unstructured":"Brands S.: Rethinking Public Key Infrastructures and Digital Certificates; Building in Privacy, 1st edn MIT Press, Cambridge (2000).","edition":"1"},{"key":"1228_CR5","first-page":"93","volume-title":"Advances in Cryptology\u2014EUROCRYPT 2001, Lecture Notes in Computer Science","author":"J Camenisch","year":"2001","unstructured":"Camenisch J., Lysyanskaya A.: An efficient system for non-transferable anonymous credentials with optional anonymity revocation. In: Pfitzmann B. (ed.) Advances in Cryptology\u2014EUROCRYPT 2001, Lecture Notes in Computer Science, vol. 2045, pp. 93\u2013118. Springer, New York (2001)."},{"key":"1228_CR6","first-page":"199","volume-title":"Advances in Cryptology\u2014CRYPTO \u201982","author":"D Chaum","year":"1982","unstructured":"Chaum D.: Blind signatures for untraceable payments. In: Chaum D., Rivest R.L., Sherman A.T. (eds.) Advances in Cryptology\u2014CRYPTO \u201982, pp. 199\u2013203. Plenum Press, New York (1982)."},{"key":"1228_CR7","unstructured":"Hoepman J.-H.: Privacy friendly e-ticketing for public transport (2021). CoRR abs\/2101.09085."},{"key":"1228_CR8","unstructured":"IBM Research Z\u00fcrich Team: Specification of the identity mixer cryptographic library."},{"key":"1228_CR9","first-page":"76","volume-title":"Selected Areas in Cryptography (SAC) 2002, Lecture Notes in Computer Science","author":"J Jonsson","year":"2006","unstructured":"Jonsson J.: On the security of CTR + CBC-MAC. In: Nyberg K., Heys H.M. (eds.) Selected Areas in Cryptography (SAC) 2002, Lecture Notes in Computer Science, vol. 2595, pp. 76\u201393. Springer, New York (2006)."},{"key":"1228_CR10","first-page":"150","volume-title":"Advances in Cryptology-CRYPTO \u201997, Lecture Notes in Computer Science","author":"A Juels","year":"1997","unstructured":"Juels A., Luby M., Ostrovsky R.: Security of blind digital signatures (extended abstract). In: Kaliski B.S. Jr. (ed.) Advances in Cryptology-CRYPTO \u201997, Lecture Notes in Computer Science, vol. 1294, pp. 150\u2013164. Springer, New York (1997)."},{"key":"1228_CR11","doi-asserted-by":"publisher","DOI":"10.1201\/b17668","volume-title":"Introduction to Modern Cryptography","author":"J Katz","year":"2014","unstructured":"Katz J., Lindell Y.: Introduction to Modern Cryptography, 2nd edn CRC Press, Boca Raton (2014).","edition":"2"},{"key":"1228_CR12","first-page":"80","volume-title":"Theory of Cryptography (TCC) 2006, Lecture Notes in Computer Science","author":"T Okamoto","year":"2006","unstructured":"Okamoto T.: Efficient blind and partially blind signatures without random oracles. In: Halevi S., Rabin T. (eds.) Theory of Cryptography (TCC) 2006, Lecture Notes in Computer Science, vol. 3876, pp. 80\u201399. Springer, New York (2006)."},{"key":"1228_CR13","doi-asserted-by":"crossref","unstructured":"Okamoto T.: Efficient blind and partially blind signatures without random oracles. Cryptology ePrint Archive, 2006\/102:34 (2006).","DOI":"10.1007\/11681878_5"},{"key":"1228_CR14","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1007\/3-540-46766-1_9","volume-title":"Advances in Cryptology-CRYPTO \u201991, Lecture Notes in Computer Science","author":"TP Pedersen","year":"1991","unstructured":"Pedersen T.P.: Non-interactive and information-theoretic secure verifiable secret sharing. In: Feigenbaum J. (ed.) Advances in Cryptology-CRYPTO \u201991, Lecture Notes in Computer Science, vol. 576, pp. 129\u2013140. Springer, New York (1991)."},{"key":"1228_CR15","doi-asserted-by":"publisher","first-page":"662","DOI":"10.1007\/978-3-642-30057-8_39","volume-title":"Public Key Cryptography-PKC 2012, Lecture Notes in Computer Science","author":"D Schr\u00f6der","year":"2012","unstructured":"Schr\u00f6der D., Unruh D.: Security of blind signatures revisited. In: Fischlin M., Buchmann J., Manulis M. (eds.) Public Key Cryptography-PKC 2012, Lecture Notes in Computer Science, vol. 7293, pp. 662\u2013679. Springer, New York (2012)."}],"container-title":["Designs, Codes and Cryptography"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-023-01228-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10623-023-01228-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10623-023-01228-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,7,20]],"date-time":"2023-07-20T20:32:23Z","timestamp":1689885143000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10623-023-01228-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,4,29]]},"references-count":15,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2023,8]]}},"alternative-id":["1228"],"URL":"https:\/\/doi.org\/10.1007\/s10623-023-01228-2","relation":{},"ISSN":["0925-1022","1573-7586"],"issn-type":[{"value":"0925-1022","type":"print"},{"value":"1573-7586","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,4,29]]},"assertion":[{"value":"17 May 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 October 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 April 2023","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 April 2023","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}