Group signatures enable a participant to sign on behalf of a group of users without revealing which member of the group signed. A group signature consists of group members and a group manager. The manager can add members to the group, and in some dynamic group signature schemes, remove members from the group. The manager can also revoke signature anonymity, i.e. expose the identity of any signer based on only the signature.