Privacy‑preserving signature scheme where a signer is indistinguishable within a group, used in some cryptocurrencies to hide the true signer.