Privacy
Intermediate
Updated 1/15/2025
What is
Sigma-Protocols?
Composable zero-knowledge proof system built into ErgoScript, enabling privacy features, multi-signatures, and complex authentication without revealing secrets.
Sigma protocols are a class of zero-knowledge proofs that allow proving knowledge of a secret without revealing it. In Ergo, Sigma protocols are built directly into ErgoScript, the smart contract language, making them first-class citizens of the platform. They can be composed using AND, OR, and THRESHOLD operations to create complex spending conditions. This enables features like ring signatures (proving you're one of a group without revealing which), multi-signatures, time-locked transactions, and the privacy mixing in ErgoMixer - all without trusted setup or heavy computation.
Key Points
- Zero-knowledge proofs built into ErgoScript
- Prove knowledge without revealing secrets
- Composable with AND, OR, THRESHOLD
- Enable ring signatures and multi-sig
- Power ErgoMixer privacy features
- No trusted setup required
Use Cases
1
Privacy mixing with ErgoMixer
2
Multi-signature wallets and DAOs
3
Ring signatures for anonymous group membership
4
Time-locked transactions
5
Atomic swaps with privacy
6
Selective disclosure for compliance
Technical Details
Sigma protocols in Ergo are based on discrete logarithm assumptions (Schnorr signatures). ErgoScript supports proveDlog (prove knowledge of discrete log) and proveDHTuple (Diffie-Hellman tuple proofs). These primitives combine with logical operators: SigmaAnd, SigmaOr, and atLeast(k, [sigs]) for threshold signatures. The resulting proofs are efficient and can be verified quickly by nodes.
Related Infographics
Related Articles
Frequently Asked Questions
Questions about Sigma-Protocols
Common questions about this topic
Is Ergo better than Monero for privacy?
Different privacy models for different needs. Monero provides always-on, protocol-level privacy with ring signatures. Ergo offers optional privacy via Sigma Protocols with selective disclosure - you can prove things about data without revealing the data. Ergo excels at programmable privacy (private smart contracts), while Monero excels at simple private transfers.
Comparison
Privacy
Is Ergo a good investment?
This is not financial advice. Ergo has strong fundamentals: fair launch (no VC dump risk), innovative technology (eUTXO, Sigma Protocols, NiPoPoWs), active development, and a cypherpunk ethos. It's a smaller market cap project with higher risk/reward than established chains. Research thoroughly, understand the technology, and never invest more than you can afford to lose.
Comparison
Getting Started
What can I do with Ergo?
Ergo supports a full ecosystem: trade on Spectrum DEX, use SigmaUSD stablecoin, mix transactions with ErgoMixer, collect NFTs on SkyHarbor, mine with GPUs, lend/borrow on DuckPools, bridge to other chains via Rosen, and build dApps with ErgoScript. It's a complete platform for decentralized finance and applications.
Explainer
Getting Started
What is Ergo blockchain?
Ergo is a fair-launched Proof-of-Work blockchain with advanced smart contract capabilities. It combines Bitcoin's security model (UTXO, PoW) with Ethereum-style programmability through the eUTXO model and ErgoScript. No pre-mine, no ICO, no VC control - built by cypherpunks for financial freedom.
Explainer
Getting Started