This document describes the BBS Signature scheme, a secure, multi-
message digital signature protocol, supporting proving knowledge of a
signature while selectively disclosing any subset of the signed
messages. Concretely, the scheme allows for signing multiple
messages whilst producing a single, constant size, digital signature.
Additionally, the possessor of a BBS signatures is able to create
zero-knowledge, proofs of knowledge of a signature, while selectively
disclosing subsets of the signed messages. Being zero-knowledge, the
BBS proofs do not reveal any information about the undisclosed
messages or the signature itself, while at the same time,
guaranteeing the authenticity and integrity of the disclosed
messages.
2026-07-12T21:29:43Z/api/v1/group/group/31/110664/api/v1/name/intendedstdlevelname/inf/[]draft-irtf-cfrg-bbs-signatures120/api/v1/doc/document/draft-irtf-cfrg-bbs-signatures/10/api/v1/doc/state/1//api/v1/doc/state/150//api/v1/doc/state/56//api/v1/name/streamname/irtf//api/v1/submit/submission/128743//api/v1/submit/submission/129490//api/v1/submit/submission/132356//api/v1/submit/submission/135422//api/v1/submit/submission/138082//api/v1/submit/submission/138978//api/v1/submit/submission/143409//api/v1/submit/submission/145755//api/v1/submit/submission/150170//api/v1/submit/submission/153834//api/v1/submit/submission/158617/The BBS Signature Scheme/api/v1/name/doctypename/draft/