Verifiably Encrypted Signatures: Security Revisited and a New Construction

In structure-preserving signatures on equivalence classes (SPS-EQ-\(\mathcal {R}\) ), introduced at \(\textsc {Asiacrypt}\) 2014, each message M in \((\mathbb {G}^*)^\ell \) is associated to its projective equivalence class, and a signature commits to the