[–] sarciszewski 11y ago ↗ > delivering stable protocols and secure software upon genesis block release> Elliptic curve (secp256k1, ECDSA)Isn't secp256k1 and ECDSA prone to implementation errors? Why not use EdDSA instead? :) [–] tptacek 11y ago ↗ Those are Bitcoin's primitives, right? Presumably, they're just doing what everyone else does. [–] sarciszewski 11y ago ↗ Sure, I just thought (based on the genesis block comment) that they were going to make their own. And, well, https://eprint.iacr.org/2014/161.pdfUsing the same primitives as everyone else is probably a conservative choice. [–] nullz 11y ago ↗ Relevant code if someone wants to audit: https://github.com/ethereum/go-ethereum/blob/4df2e1ef5c20ebd...
[–] tptacek 11y ago ↗ Those are Bitcoin's primitives, right? Presumably, they're just doing what everyone else does. [–] sarciszewski 11y ago ↗ Sure, I just thought (based on the genesis block comment) that they were going to make their own. And, well, https://eprint.iacr.org/2014/161.pdfUsing the same primitives as everyone else is probably a conservative choice.
[–] sarciszewski 11y ago ↗ Sure, I just thought (based on the genesis block comment) that they were going to make their own. And, well, https://eprint.iacr.org/2014/161.pdfUsing the same primitives as everyone else is probably a conservative choice.
[–] nullz 11y ago ↗ Relevant code if someone wants to audit: https://github.com/ethereum/go-ethereum/blob/4df2e1ef5c20ebd...
5 comments
[ 0.18 ms ] story [ 20.7 ms ] thread> Elliptic curve (secp256k1, ECDSA)
Isn't secp256k1 and ECDSA prone to implementation errors? Why not use EdDSA instead? :)
Using the same primitives as everyone else is probably a conservative choice.