Privacy
Intermediate
Updated 1/15/2025
What is
Sigma-Protocols?
Composable zero-knowledge proof system built into ErgoScript, enabling privacy features, multi-signatures, and complex authentication without revealing secrets.
Sigma protocols are a class of zero-knowledge proofs that allow proving knowledge of a secret without revealing it. In Ergo, Sigma protocols are built directly into ErgoScript, the smart contract language, making them first-class citizens of the platform. They can be composed using AND, OR, and THRESHOLD operations to create complex spending conditions. This enables features like ring signatures (proving you're one of a group without revealing which), multi-signatures, time-locked transactions, and the privacy mixing in ErgoMixer - all without trusted setup or heavy computation.
Key Points
- Zero-knowledge proofs built into ErgoScript
- Prove knowledge without revealing secrets
- Composable with AND, OR, THRESHOLD
- Enable ring signatures and multi-sig
- Power ErgoMixer privacy features
- No trusted setup required
Use Cases
1
Privacy mixing with ErgoMixer
2
Multi-signature wallets and DAOs
3
Ring signatures for anonymous group membership
4
Time-locked transactions
5
Atomic swaps with privacy
6
Selective disclosure for compliance
Technical Details
Sigma protocols in Ergo are based on discrete logarithm assumptions (Schnorr signatures). ErgoScript supports proveDlog (prove knowledge of discrete log) and proveDHTuple (Diffie-Hellman tuple proofs). These primitives combine with logical operators: SigmaAnd, SigmaOr, and atLeast(k, [sigs]) for threshold signatures. The resulting proofs are efficient and can be verified quickly by nodes.
Related Infographics
Related Articles
Frequently Asked Questions
Questions about Sigma-Protocols
Common questions about this topic
Is Ergo better than Monero for privacy?
Different privacy models for different needs. Monero provides always-on, protocol-level privacy with ring signatures. Ergo offers optional privacy via Sigma Protocols with selective disclosure - you can prove things about data without revealing the data. Ergo excels at programmable privacy (private smart contracts), while Monero excels at simple private transfers.
Comparison
Privacy
Is Ergo a good investment?
This is not financial advice. Ergo has strong fundamentals: fair launch (no VC dump risk), innovative technology (eUTXO, Sigma Protocols, NiPoPoWs), active development, and a cypherpunk ethos. It's a smaller market cap project with higher risk/reward than established chains. Research thoroughly, understand the technology, and never invest more than you can afford to lose.
Comparison
Getting Started
What can I do with Ergo?
Ergo supports a broad ecosystem: use SigmaUSD, explore historical and current DeFi references, mix transactions with ErgoMixer where lawful, collect NFTs, mine with GPUs, bridge to other chains via Rosen, and build dApps with ErgoScript. Always verify current project status before sending funds to a third-party app.
Explainer
Getting Started
How to provide liquidity on Ergo?
Providing liquidity on Ergo depends on the current active DEX or AMM venue. In general, you deposit equal value of two assets into a pool, receive LP tokens representing your share, and earn a portion of trading fees. Spectrum Finance is historical/frozen since February 2024, so verify the active venue, contracts, liquidity depth, and withdrawal process before depositing funds.
How-to
DeFi