I was wondering why ecdsa generates a signature in form of a pair (r and s) and why it can't be only one value.

  • 1
    $\begingroup$ Welcome to Cryptography.SE. Consider that you only $r$ or $s$, can you validate the signature? It is for keeping the secrets secret (they are masked)! $\endgroup$
    – kelalaka
    Nov 12 '21 at 9:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.