Post #3454546

Is there any cryptographic signing protocol whereby the signature can't be attested true without revealing a recipient private key for which the signer only had the public key?