Designated verifier signature

A designated verifier signature is a signature scheme in which signatures can only be verified by a single designated verifier who is chosen by the signer. Designated verifier signatures were first proposed in 1996 by Jakobsson Sako, Kazue Sako, and Russell Impagliazzo.^[1] Proposed as a way to combine authentication and off-the-record messages, designated verifier signatures allow authenticated, private conversations to take place.^[2]

References

1. ^ "How to Leak a Secret". Advances in Cryptology — ASIACRYPT 2001 (Springer Berlin / Heidelberg) 2248: 552–565. doi:10.1007/3-540-45682-1_32. http://www.cs.uwaterloo.ca/~bssadjad/courses/crypto/leak_secret_rivest.pdf. 
2. ^ Jakobsson, Markus; Kazue Sako, and Russell Impagliazzo (May 1996). "Designated Verifier Proofs and Their Applications". In Ueli Maurer (PDF). Proceedings of Eurocrypt 1996. 1440. EUROCRYPT 1996. Saragossa, Spain: Springer-Verlag. pp. 199-205. doi:10.1007/3-540-49677-7_30. ISBN 978-3-540-65069-0. http://www.informatics.indiana.edu/markus/papers/dvp.pdf.