3 ms·
Schnorr signatures (e.g., Ed25519) are just another kind of digital signature, there's nothing that makes them more challenging to use.
by hdevalence 6y ago
Schnorr signatures (e.g., Ed25519) are just another kind of digital signature, there's nothing that makes them more challenging to use.
- nullc 6y agoThere is nothing more challenging about schnorr signatures themselves, but 100% of the lauded "advanced" things that can be done with a schnorr signature over ECDSA-- such as threshold signatures-- as substantially more complicated and error prone. Until recently (or still) pretty much none of them had production usable implementations anywhere for any application, and most academic coverage has mostly been a glib "trivially you can do that"-- ignoring that naive "obvious" implementations end up being completely insecure.