@article {IIIA-2007-1615,
title = {Identity-based ring signatures from RSA},
journal = {Theoretical Computer Science},
volume = {389},
number = {1},
year = {2007},
pages = {100-117},
abstract = {Shamir proposed in 1984 the first identity-based signature scheme, whose security relies on the RSA problem. A similar scheme was proposed by Guillou and Quisquater in 1988. Formal security of these schemes was not argued and/or proved until many years later. Taking the Guillou-Quisquater scheme as the starting point, we design and analyze in this work ring signature schemes and distributed ring signature schemes for identity-based scenarios whose security is based on the hardness of the RSA problem. These are the first identity-based ring signature schemes which do not employ bilinear pairings. Furthermore, the resulting schemes satisfy an interesting property: the real author(s) of a ring signature can later open the anonymity and prove that he is actually the person who signed the message.},
author = {Javier Herranz}
}