I'm looking for the history of the method (ECDSA public key recovery from signature). Where did this implementation first appear in (is it bitcoin?) and who discovered this method?
$\begingroup$
$\endgroup$
-
1$\begingroup$ This is the earliest mentioning I found: Daniel R. L. Brown, SEC 1: Elliptic Curve Cryptography (2009) -- 4.1.6 Public Key Recovery Operation $\endgroup$ – pintor Jul 20 '18 at 7:51
$\begingroup$
$\endgroup$
Update: in a footnote of his paper Generic Groups, Collision Resistance, and ECDSA (online since 2002-02-27), then published in Designs, Codes and Cryptography (2005), Daniel R. L. Brown wrote that
In ECDSA, the public key can be recovered from the message and the signature.
Then, acting as editor of the SEC 1 standard, he put there how such ECDSA public key recovery can be made. In this version v1.99 of 2009-05-21 with changes since v1.5 visible, that section appears as a late addition.
Thus Daniel R. L. Brown of Certicom could have came up with ECDSA public key recovery circa 2002; and at least knew about its feasibility. That vastly predates Bitcoin.
-
$\begingroup$ I'll accept this as answer for the moment since there isn't a better answer $\endgroup$ – Consy Nov 2 '19 at 23:01
