3 ms·
Earlier on his blog: How to design an elliptic-curve signature system — There are many choices of elliptic-curve signature systems. The standard choice, ECDSA,
by pygy_ 12y ago
Earlier on his blog:
How to design an elliptic-curve signature system — There are many choices of elliptic-curve signature systems. The standard choice, ECDSA, is reasonable if you don't care about simplicity, speed, and security.
He goes on to demonstrate his point in minute details.
- X-Istence 12y agoIt does not surprise me, considering he also co-authored http://safecurves.cr.yp.to http://safecurves.cr.yp.to with Tanja Lange.
- nanofortnight 12y agoIsn't it well known that Schnorr signatures are provably secure (under a random oracle model) while ECDSA isn't?