I have a following use case:
User has his master public (
sk) - private (
pk) key pair (Ed25519).
In DB we store a public key.
Is there any derivation mechanism
D, where when knowing a derivation parameter
x we can use it derive a new private key
sk2 = D(sk, x) and public key (knowing only public key in DB):
pk2 = Dx(pk, x) such that we can verify signature done by
In other words, I would like to have a derivation mechanism I can use on the user side and server side, where server doesn't know private key. Best if it works with Ed25519 keys.