Skip to main content
3 of 3
polish
kelalaka
  • 49.5k
  • 12
  • 118
  • 205

Why is a random component needed for ECDH key pair generation in Mbed TLS?

Please forgive me if this is not the right place, however, I encountered this TLS implementation with a function that generates an ECDH key pair on an elliptic curve:

In addition to the private key and a point on the curve, the function also needs random inputs. Why and for what are the random variables required? Why isn't it just $Q=[d]G$?

Evgeni Vaknin
  • 1.1k
  • 8
  • 20