Let's say Alice has three secrets: SecretA, SecretB, SecretC
Alice shows these three secrets to Bob and gets a single signature from him that signs all three secrets together. Something like
Signature = Sign(Hash(SecretA, SecretB, SecretC))
Of course some care needs to be taken here with the hash function to avoid second preimage attacks.
Now Alice would like to prove to Carol that Bob has seen/signed SecretA, without revealing SecretB and SecretC to her (Bob is not around anymore to ask, but Carol trusts Bob's certificate).
Is there some form of hashing & signatue that would allow this? So that she can generate some proof using all three secrets plus the signature, but that will require to reveal only SecretA to Carol (plus maybe some data derived from SecretB and SecretC, which does not allow to recreate these secrets however)