Skip to main content
2 of 3
fixed title/body grammar, added markdown link

Why is a random component needed for ECDH key pair generation in Mbed TLS?

Please forgive me if this is not the right place, however, I encountered this TLS implementation with function that generates an ECDH key pair on an elliptic curve:

In addition to the private key and a point on the curve, the function also needs random inputs. Why and for what are the random variables required? Why isn't it just Q=d*G?

Evgeni Vaknin
  • 1.1k
  • 8
  • 20