Subset Signatures with Controlled Context-Hiding
Book
Subset signatures are a variant of malleable signatures which allow anyone to derive signatures on any subset of previously signed sets in such a way that derived signatures are indistinguishable from new signatures on the subset (i.e.~context-hidi... Read More about Subset Signatures with Controlled Context-Hiding.