Deriving a public key from a public key in Ed25519 is possible, some algorithms are available. My question is why there are so few implementations compared to secp256k1 for example. The extra checks necessary to implement it look at least more error prone than with other curves.

  • $\begingroup$ Do you mean to create ephemeral keys like this one Is it possible to derive a public key from another public key without knowing a private key (Ed25519)? $\endgroup$ – kelalaka Jul 31 '20 at 5:49
  • $\begingroup$ Yes, is related, but my question is if it is as safe as with secp256k1 $\endgroup$ – nultrino Jul 31 '20 at 13:11
  • $\begingroup$ A good question should extend the some in the first sentence. The second sentence has a clear answer, The popularity due to the Bitcoin. The third sentence is dangling, the extra check of what? You can edit your question by clicking the edit. $\endgroup$ – kelalaka Jul 31 '20 at 13:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.