I'm looking for the history of the method (ECDSA public key recovery from signature). Where did this implementation first appear in (is it bitcoin?) and who discovered this method?

  • 1
    $\begingroup$ This is the earliest mentioning I found: Daniel R. L. Brown, SEC 1: Elliptic Curve Cryptography (2009) -- 4.1.6 Public Key Recovery Operation $\endgroup$
    – pintor
    Commented Jul 20, 2018 at 7:51

1 Answer 1


Update: in a footnote of his paper Generic Groups, Collision Resistance, and ECDSA (online since 2002-02-27), then published in Designs, Codes and Cryptography (2005), Daniel R. L. Brown wrote that

In ECDSA, the public key can be recovered from the message and the signature.

Then, acting as editor of the SEC 1 standard, he put there how such ECDSA public key recovery can be made. In this version v1.99 of 2009-05-21 with changes since v1.5 visible, that section appears as a late addition.

Thus it seems possible that Daniel R. L. Brown of Certicom came up with ECDSA public key recovery circa 2002. At least he knew about its feasibility. That vastly predates Bitcoin.

  • $\begingroup$ I'll accept this as answer for the moment since there isn't a better answer $\endgroup$
    – Consy
    Commented Nov 2, 2019 at 23:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.