I'm looking for the history of the method (ECDSA public key recovery from signature). Where did this implementation first appear in (is it bitcoin?) and who discovered this method?


1 Answer 1


Update: in a footnote of his paper Generic Groups, Collision Resistance, and ECDSA (online since 2002-02-27), then published in Designs, Codes and Cryptography (2005), Daniel R. L. Brown wrote that

In ECDSA, the public key can be recovered from the message and the signature.

Then, acting as editor of the SEC 1 standard, he put there how such ECDSA public key recovery can be made. In this version v1.99 of 2009-05-21 with changes since v1.5 visible, that section appears as a late addition.

Thus it seems possible that Daniel R. L. Brown of Certicom came up with ECDSA public key recovery circa 2002. At least he knew about its feasibility. That vastly predates Bitcoin.

  • $\begingroup$ I'll accept this as answer for the moment since there isn't a better answer $\endgroup$
    – Consy
    Nov 2, 2019 at 23:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.