BLS Multi-Signature
Boneh–Lynn–Shacham, or BLS Multi signature, is a cutting-edge cryptographic method intended to improve the scalability and effectiveness of digital signature procedures. It enables several people to sign a single communication, and all of their separate signatures are subsequently merged into a single, small signature.

The Fundamental Idea: Bilinear Pairings
The foundation of BLS signatures is a sophisticated mathematical idea known as bilinear pairings over elliptic curves. The following property of a bilinear pairing function, let’s call it e, is crucial to comprehend despite the complex maths:
e(a⋅P,b⋅Q)=e(P,Q)ab
where a and b are scalar values (private keys) and P and Q are points on an elliptic curve. This characteristic makes it possible to aggregate and verify signatures in a special way.
How BLS Multi signature Works?
Consider a situation in which a message M needs to be signed by a group of N individuals (such as a committee, a board of directors, or a group of blockchain validators).
Key Generation: Every member of the team creates a distinct private key (SKI) and matching public key (PKI). The private key and a generator point G are used to create the public key.
i.e., pki=ski⋅G.
Individual Signing: Each person must hash M to an elliptic curve point, H(M), before signing it. Signatures are generated using their private key:
σi=ski⋅H(M).
Signature Aggregation: The secret behind BLS is Signature Aggregation. The separate signatures can be easily combined together to create a single, aggregated signature σagg, rather than needing to gather all N signatures:
σagg=σ1+σ2+…+σN
Public Key Aggregation: In a similar manner, the public keys can be combined to form pkagg, a single public key:
pkagg=pk1+pk2+…+pkN
Verification: You don’t have to examine each individual signature in order to validate the aggregated signature. Using the aggregated public key and the aggregated signature, you just need to carry out one pairing check:
e(G,σagg)=e(pkagg,H(M))
BLS Multisignature vs. Traditional Multisignature
This one check is sufficient to demonstrate that all N individual signatures were accurately aggregated from the original message due to the characteristics of bilinear pairings.
Let’s contrast BLS multisignature with a more conventional method, such as that employed in Bitcoin’s P2SH (Pay to Script Hash) multisig wallets, to illustrate the benefits.
Feature | Traditional Multisignature (e.g., Bitcoin) | BLS Multisignature |
Transaction Data Size | Requires storing all N signatures and all N public keys on the blockchain. This takes up a lot of space, and the size grows linearly with the number of signers. | Only requires storing a single aggregated signature and a single aggregated public key. This results in a very small, fixed-size data footprint, regardless of the number of signers. |
Verification Cost | Each of the N signatures must be individually verified, which can be computationally expensive and time-consuming. | Only a single cryptographic operation (a pairing check) is needed to verify the entire signature, making verification extremely efficient. |
Setup and Complexity | The setup is relatively simple but requires complex scripting on-chain to manage the signatures. | The underlying cryptography is more complex, but the on-chain implementation is simpler, as it only needs to deal with a single signature and public key. |
Application | Often used for wallet security and joint ownership of funds. | Ideal for decentralized applications, especially blockchain consensus protocols (like in Ethereum 2.0 and other Proof-of-Stake chains) where thousands of validators need to sign blocks and transactions. |
Key Features and Benefits
BLS multi signatures benefit big decentralized networks:
- Compactness: The final signature is always small (e.g., 160 bits) and saves storage space regardless of signer count (compared to 320 bits for individual signatures).
- Efficiency: The verification procedure is faster and consumes fewer resources due to sending and validating only one signature, unlike conventional approaches.
- In blockchains, this expedites block validation. BLS only needs a single communication round trip for aggregation, in contrast to other techniques like Schnorr signatures.
- Scalability: BLS multisig significantly lowers the quantity of data saved on the blockchain and the processing power required for verification by combining several signatures into a single one. For networks with thousands of validators, this is essential.
- Security: BLS signatures provide robust cryptographic security for digital signature verification and are provably secure under specific hardness assumptions in pairing-based cryptography.
- Simplicity: Managing a single public key and a single signature is far easier for a user than managing a list of numerous ones.
- Privacy: By using public key aggregation to conceal the list and participant count, BLS can improve privacy.
Also Read About What is Decentralized Storage? How it works, And Benefits
Applications of BLS MultiSignature

BLS multisignatures are an effective way to address blockchain technology’s scalability issues. They are especially helpful in situations like a vote or block where numerous validators or signers must sign the same message:
- Ethereum 2.0: A key component of the network’s scaling plan, it is widely used for validator signatures on blocks.
- Internet/Dfinity Computer.
- Chia Network: Even with thousands of validators participating, it keeps the blockchain light and quick.
- Consensus Mechanisms: In proof-of-stake blockchains, these mechanisms can increase consensus efficiency and decrease the size of validator sets.
- Multi-Party calculation: They allow for safe calculation between several participants, in which each one must provide a proof or signature.
- Secure Communication: BLS multi signatures can improve the security of inter-blockchain protocols, including cross-chain communication. Threshold Signatures: These can be employed in schemes that require a minimum number of participants to sign a transaction in order for it to be considered legitimate.
- Decentralized Identity: Contributes to access control and decentralized identity management.
- Bitcoin (Conceptual): It can be used in situations like “Multi sign addresses” to reduce transaction size by combining multiple signatures into one. It can also be applied to “multi-input transactions,” in which a single signature is created from all the signatures associated with different transaction inputs.
BLS multisignatures essentially reduce the laborious process of confirming several individual approvals to a single, effective check. Consider a group of engineers working on a complicated project where each engineer was customarily expected to sign a separate document for each significant decision. To establish unanimity, the project manager had to laboriously gather and confirm each signature. This is comparable to a typical multisignature procedure.
Every engineer contributes a piece to the puzzle that, when put together, creates a single, small “team seal” or “group stamp” with BLS multi signature. Compared to monitoring individual documents, the project manager can validate this single collective seal far more quickly and with less space. Importantly, even if some engineers are not immediately available for real-time back-and-forth communication, the “puzzle pieces” can still be included, simplifying the entire decision-making process for improved security, scalability, and efficiency.
Also Read About Pay to Public Key(P2PK): Original Bitcoin Transaction Output
Summary Table
Feature | BLS Multisignature |
---|---|
Signature size | Constant (small) |
Verification cost | One signature to verify |
Use case | Many signers, same message |
Example usage | Ethereum 2.0 validators |