Home > Resources > papers > Dam04-Sigma-Protocols

On Sigma Protocols (Damgård)

URL: https://www.cs.au.dk/~ivan/Sigma.pdf

Summary

Ivan Damgård's lecture notes providing a unified treatment of Sigma (Σ) protocols. Covers the structure of three-move honest-verifier ZK proofs, the Fiat-Shamir transform, composition (AND/OR), and special soundness. The standard reference for understanding sigma protocols from first principles.

Used by

• Sigma-Protocols-Damgard
• ZK-Proof-Taxonomy

Related resources

• DockNetwork Crypto Library Analysis (doc, 2026)
• How to Prove Yourself: Practical Solutions to Identification and Signature Problems (Fiat-Shamir) (paper, 1986)
• Proof Systems for General Statements about Discrete Logarithms (Camenisch-Stadler 1997) (paper, 1997)
• ZKProof Sigma Protocol Proposal (Workshop 4) (paper, 2021)