Ring signature example?

[dan-da]

Anyone know where I can find a Ring Signatures example or can provide one?

eg as described in:

• https://crypto.stanford.edu/~dabo/pubs/papers/aggreg.pdf
• http://isrc.ccs.asia.edu.tw/~vdoi/upload/JID190002/2020/1816-3548-2020-00015.pdf

[burdges]

At least one if not both of the linked papers has a miller loop per ring member, which sounds like the slowest construction ever proposed.

It depends on ring size, like if used in a state channel for a game then Bootle's inner-product arguments work, or maybe even naive Schnorr ring signatures. As a rule, one prefers a large ring size, so one should modify the zcash sapling circuit perhaps.

[dan-da]

@burdges thx I appreciate your insights. yeah, I'm not committed to a particular construction, nor am I a cryptographer. Those were just the first two papers I found that discussed ring sigs in conjunction with BLS. So I'm hoping/looking for an example of doing ring sigs with threshold_crypto for a POC. It doesn't have to be the most efficient thing right now, just needs to work.