Abstract: A three-party signing protocol uses a Trusted Third Party (denoted T) to simulate a two-party protocol in which a sender, designated party A, anonymously signs data intended for a particular receiver, designated party B, such that B can verify the signature on the data without learning A's true identity, and data and signatures received by different receivers cannot be cross-linked, aggregated, or associated with a single sender. In this three-party signing protocol, A has only one public/private signature key-pair. In the three-party signing protocol, T is permitted to “see” signatures generated by A, but B is not permitted to “see” signatures generated by A, unless they are randomized or encrypted, since doing so would permit A's generated signatures and signed data to be cross-linked. Thus, in the three-party signing protocol, T is used to “vouch to B on behalf of A” that signatures generated by A are valid.