I'm surprised by this too. Bitcoin was developed just barely before ed25519 was finalized, which is probably why it uses secp256k1. Unless intended mainly for

I'm surprised by this too. Bitcoin was developed just barely before ed25519 was finalized, which is probably why it uses secp256k1. Unless intended mainly for government users (FIPS), almost every new cryptographic system uses ed25519 -- except Nostr. I always assumed Nostr chose secp256k1 so you could send bitcoin to another Nostr user without some extra "payment address request protocol" bolted on the side. Very surprising that this was not the motivation!