Overhead comparison between BPRF and the work of [8].

|R|: Number of members in a ring signature group †: The result was measured in AMAZON EC2 c4.8xlarge virtual machines when five servers are used for the preparation step. ‡: ELGamal.Sig() and ELGamal.Ver() require 1 exponentiation and 3 exponentiations, respectively. §: Linkable.Ring.Sig() and Linkable.Ring.Vig() of [31] require 7 exponentiations and 4 exponentiations, respectively.