1
$\begingroup$

Does the application of Shor's algorithm in any way relate/affect the schnorr signature in ed25519?

|improve this question
$\endgroup$
  • $\begingroup$ Your question is a bit unclear. Are you asking whether Shor's algorithm breaks the Schnorr signatures over Curve25519? Ed25519 signatures are btw related but distinct from Schnorr signatures. $\endgroup$ – Maeher Mar 6 '18 at 1:21
  • $\begingroup$ Hi Maeher, the answer from Squeamish is exactly on point. thanks. $\endgroup$ – Nathan Aw Mar 6 '18 at 7:10
5
$\begingroup$

Shor's algorithm can compute discrete logs in elliptic curves and thereby recover the secret scalar from a public Ed25519 key, which you can use to forge signatures of your choice.

So, yes, it affects Ed25519—it completely breaks Ed25519, or it would if you could engineer a quantum computer capable of executing it.

It can also compute discrete logs in finite fields, which you can use to forge traditional finite-field Schnorr signatures.

|improve this answer
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.