Does the application of Shor's algorithm in any way relate/affect the schnorr signature in ed25519?

  • $\begingroup$ Your question is a bit unclear. Are you asking whether Shor's algorithm breaks the Schnorr signatures over Curve25519? Ed25519 signatures are btw related but distinct from Schnorr signatures. $\endgroup$
    – Maeher
    Commented Mar 6, 2018 at 1:21
  • $\begingroup$ Hi Maeher, the answer from Squeamish is exactly on point. thanks. $\endgroup$
    – Nathan Aw
    Commented Mar 6, 2018 at 7:10

1 Answer 1


Shor's algorithm can compute discrete logs in elliptic curves and thereby recover the secret scalar from a public Ed25519 key, which you can use to forge signatures of your choice.

So, yes, it affects Ed25519—it completely breaks Ed25519, or it would if you could engineer a quantum computer capable of executing it.

It can also compute discrete logs in finite fields, which you can use to forge traditional finite-field Schnorr signatures.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.