[jstanley]

A ring signature would do. You can be sure that the signature came from one of a set of public keys, without knowing which particular private key was used.

[maxtaco]

We are still very early stages here, but we really like the Anonize system (https://eprint.iacr.org/2015/681.pdf)