From: "Mark M." <markm@voicenet.com>
Date: Fri, 15 Nov 1996 00:01:04 -0800 (PST)
To: cypherpunks@toad.com
Subject: Re: Members of Parliament Problem
In-Reply-To: <v02140b01aeb1a0ff57d2@[192.0.2.1]>
Message-ID: <Pine.LNX.3.95.961115024717.3497A-100000@gak.voicenet.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 14 Nov 1996, Peter Hendrickson wrote:

> I read awhile ago that certain members of Parliament do not speak
> their mind regarding the situation in Northern Ireland.  The reason
> they give is that they have children and they fear the IRA.
> 
> There are times when one wishes to speak anonymously, yet speak
> as a member of a group.
> 
> Is there a way to take published public keys and combine them with
> your own in such a way that your identity is not compromised, but
> it is clear beyond a doubt that you control one of a set of public
> keys?

One way would be to have some trusted third party issue a signature for any
key that belongs to a member of the group.  The problem with this method is
that the certificate issuer knows which keys belong to which members.  This
can be solved by blind-signing the keys.  A single secret key could be
distributed to every member, but this is vulnerable to security problems.
Also, it would be impossible to determine if a group of messages were each
issued by different people or if it was the same person.

I don't know if there is any better cryptographic protocol to handle a
situation like this.  Oblivious signatures might be a possibility, but I don't
know how they work and if they could be used in such a protocol.

Mark
- --   
finger -l for PGP key
PGP encrypted mail prefered.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3
Charset: noconv

iQEVAwUBMowjzizIPc7jvyFpAQGWnQf/fH+RLAE8AUW8CrASprXuHZH/z2/30M6l
zWeC8E43dh1Hy4YLqeNyKNblHp717vla2/EeOJQUuKN0FBMdJoJVGP+dH4BKMgWA
mobfOhq+n+vDQCvwonkrjy2oq5+2ULS6uIkGLvaMRrCWwJ9wElE6LHOAo/Tz9Y8p
71ICTn6k9z6V67Aeu/5q0GyY4QrLdPZqxNpjW7LqGkV5LNTTttqxCiWlrpRqLRJu
81qgBrDZtTG0nB8emqW3lpTag48yyeePAAYMuryLQ3y7lDfrQloZ+t5MtOgnrUlw
dVvQ2hIn9KVNKlkmJi/7aLFUZxp5jNaEtP1+LxPGHouiJC3utp3cJA==
=I6hn
-----END PGP SIGNATURE-----