I'm looking for the history of the method (ECDSA public key recovery from signature). Where did this implementation first appear in (is it bitcoin?) and who discovered this method?
$\begingroup$
$\endgroup$
1
-
1$\begingroup$ This is the earliest mentioning I found: Daniel R. L. Brown, SEC 1: Elliptic Curve Cryptography (2009) -- 4.1.6 Public Key Recovery Operation $\endgroup$– pintorJul 20, 2018 at 7:51
Add a comment
|
1 Answer
$\begingroup$
$\endgroup$
1
Update: in a footnote of his paper Generic Groups, Collision Resistance, and ECDSA (online since 2002-02-27), then published in Designs, Codes and Cryptography (2005), Daniel R. L. Brown wrote that
In ECDSA, the public key can be recovered from the message and the signature.
Then, acting as editor of the SEC 1 standard, he put there how such ECDSA public key recovery can be made. In this version v1.99 of 2009-05-21 with changes since v1.5 visible, that section appears as a late addition.
Thus it seems possible that Daniel R. L. Brown of Certicom came up with ECDSA public key recovery circa 2002. At least he knew about its feasibility. That vastly predates Bitcoin.
-
$\begingroup$ I'll accept this as answer for the moment since there isn't a better answer $\endgroup$– ConsyNov 2, 2019 at 23:01