Home > Resources > wikis > IRTF-CFRG-BBS-Signatures
The BBS Signature Scheme — IRTF CFRG draft¶
Last modified: 2026-10-23
Summary¶
CFRG draft standardising BBS signatures over BLS12-381: a multi-message signature of constant size whose holder can produce unlinkable zero-knowledge proofs of knowledge of the signature while selectively disclosing any subset of the messages. The main standardisation track for natively privacy-preserving (anonymous) credentials, with a known caveat of not being post-quantum secure.