BIP-340

Schnorr signatures for secp256k1; Schnorr is itself a sigma protocol (a proof of knowledge of a discrete logarithm) made non-interactive via Fiat-Shamir, and its linearity across key aggregation, adaptor signatures, and threshold schemes plus a clean security reduction make it especially tractable to compose with zero-knowledge constructions.