Bitcoin Forum
December 08, 2016, 08:13:21 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1]
  Print  
Author Topic: ECDSA signature verification requires an unnecessary modular inversion  (Read 1253 times)
ByteCoin
Sr. Member
****
expert
Offline Offline

Activity: 416


View Profile
April 20, 2011, 01:14:56 PM
 #1

Using the notation in the ECDSA wikipedia article http://en.wikipedia.org/wiki/ECDSA
An ECDSA signature is (r,s).
When verifying the signature, one of the first things calculated is the modular inverse of "s" and "s" is not otherwise used.
Since the signature is generated once and verified thousands of times (at least once by each client) , why isn't the signature (r, inverse(s)) instead?

This would save one inversion per verification.
On the signing side, if you look at the way s is calculated, inverse(s) could be calculated just as quickly. Instead of inverting the random k parameter you'd invert z+rd

Is there something I'm missing? Did they really just overlook this?

ByteCoin
Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!