An elegant Σ-protocol for proving a Pedersen-committed vector is a bit-vector, as described by @benediamond in [Diam20], but originally from Bootle et al. [BCC+15] 👇
560