The group signature scheme [1], ACJT for short, is popular. In this paper we show that it is not secure. It does not satisfy
exculpability. The group manager can sign on behalf of any group member. The drawback found in the scheme shows that some
inductions are not sound, though they are prevalent in some so-called security proofs.
Keywords group signature - exculpability - anonymity