Privacy
Advanced
Updated 11/26/2025
What is
Sigma 协议?
内置于 Ergo 的零知识证明协议族，可在无需可信设置的情况下表达复杂加密条件与隐私逻辑。
Sigma 协议（Σ‑protocols）是一类零知识证明，被深度集成在 Ergo 协议中。它们允许在不泄露秘密的情况下证明对某个秘密（例如私钥）的掌握，从而实现隐私功能、多重签名方案以及复杂访问控制。与 zk‑SNARK 不同，Sigma 协议不需要可信初始化仪式。
Key Points
- 可以在不泄露秘密的前提下证明其存在
- 无需可信设置（区别于很多 zk‑SNARK 系统）
- 作为 ErgoScript 的原生原语，可在任何智能合约中使用
- 可组合：支持 AND、OR、门限（THRESHOLD）等组合逻辑
- 支持选择性披露——例如证明"已成年"而不泄露出生日期
- 驱动 ErgoMixer 等隐私应用
Use Cases
1
通过 ErgoMixer 实现隐私交易
2
带隐藏签名者的多重签名（环签名）
3
不透露具体数据的凭证/年龄证明
4
具有隐私保证的原子交换
5
具备可验证匿名性的投票系统
Technical Details
Ergo 中的 Sigma 协议支持 Schnorr 签名、Diffie‑Hellman 元组以及它们的组合。ErgoScript 中 `proveDlog(x)` 用于证明离散对数的知识，`proveDHTuple(g,h,u,v)` 用于证明 DDH 关系。这些原语可通过 AND（&&）、OR（||）和 `atLeast` 门限操作组合出复杂的花费条件。
Related Infographics
Related Articles
Frequently Asked Questions
Questions about Sigma 协议
Common questions about this topic
What is ErgoMixer and how does it work?
ErgoMixer is a non-custodial, trustless mixing service that breaks the link between your input and output addresses. It uses Sigma Protocols to prove you're entitled to withdraw without revealing which deposit was yours. Unlike centralized mixers, there's no trusted party who could steal funds or keep logs.
Explainer
Privacy
Is Ergo a good investment?
This is not financial advice. Ergo has strong fundamentals: fair launch (no VC dump risk), innovative technology (eUTXO, Sigma Protocols, NiPoPoWs), active development, and a cypherpunk ethos. It's a smaller market cap project with higher risk/reward than established chains. Research thoroughly, understand the technology, and never invest more than you can afford to lose.
Comparison
Getting Started
How to escape financial repression with Ergo?
Ergo provides tools for financial sovereignty: self-custody with no third parties, censorship-resistant transactions via PoW, optional privacy with Sigma Protocols, and programmable money without permission. Unlike VC-backed chains, Ergo has no central authority that can freeze funds or comply with sanctions. Your keys, your coins, your freedom.
Solution
Philosophy
What is MEV resistance and why does Ergo have it?
MEV (Maximal Extractable Value) is profit extracted by reordering, inserting, or censoring transactions - think front-running and sandwich attacks. Ergo's eUTXO model provides structural MEV resistance: transactions reference specific boxes (UTXOs), making reordering attacks much harder. There's no shared global state to exploit like in account-based chains.
Explainer
Technology