Group signatures with verifier-local revocation
Short Group Signatures