I'm reading this whitepaper "EPID Provisioning and Attestation Services".Section 3.3 says that no one can distinguish whether the two signatures were generated by the same key or different keys in random base mode.But Section 3.4.3 says that if a signature in a revocation list,then verifier can reject other signatures signed with the same key.
I'm confused about it,because if on one could distinguish whether the two signatures were generated by the same key in random mode,then how could verifier do to reject other signatures signed with the same key.
