Can someone explain to me, why Zero-Knowledge-Protocols are used instead of letting the person sign a random string and then verify the signature?

Doesn't Fiat-Shamir need even more processing-power than RSA with swapped private and public keys? (RSA can be used as signature-method by "encrypting" with the private key and "decrypting" with the public key, can't it?)