A digital signature algorithm where a group of people can sign a message, and the identity of the signer is kept private.