Public Key Recovery Operation
Ricardo Alex <[email protected]> Thu, 9 Nov 2023 03:54:44 -0800 (PST)
| Newsgroups | gmane.comp.encryption.cryptopp |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_145045_1319050201.1699530884029 Content-Type: multipart/alternative; boundary="----=_Part_145046_539141463.1699530884029" ------=_Part_145046_539141463.1699530884029 Content-Type: text/plain; charset="UTF-8" According to https://www.secg.org/sec1-v2.pdf In section 4.1.6 Public Key Recovery Operation it' s possible to recover the public Key Q, at least to within a small number of choices, given an ECDSA signature (r, s) and EC domain parameters. Input: The public key recovery operations takes as input: 1. Elliptic curve domain parameters T = (p, a, b, G, n, h) or T = (m, f(x), a, b, G, n, h) at the desired security level. 2. A message M. 3. An ECDSA signature value (r, s) that is valid on message M for some public key to be determined. Is it possible to achieve that using the crypto++ library? -- You received this message because you are subscribed to the Google Groups "Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/cryptopp-users/350eb1d6-f4f5-48a5-8086-d0e05c7fa86dn%40googlegroups.com. ------=_Part_145046_539141463.1699530884029 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable According to=C2=A0https://www.secg.org/sec1-v2.pdf<div><br /></div><div>=C2= =A0 In section 4.1.6=C2=A0 Public Key Recovery Operation it' s possible to recover the public Key Q, a= t least to within a small number of choices,=C2=A0 given an ECDSA signature= (r, s) and EC domain parameters.</div><div><br /></div><div>=C2=A0 Input: = The public key recovery operations takes as input:=C2=A0</div><div><br /></= div><div>1. Elliptic curve domain parameters T =3D (p, a, b, G, n, h) or T = =3D (m, f(x), a, b, G, n, h) at the desired security level.</div><div>2. A message M.=C2=A0</div><div>3. An ECD= SA signature value (r, s) that is valid on message M for some public key to= be determined.=C2=A0=C2=A0<br /></div><div><br /></div><div>Is it possible to = achieve that using the crypto++ library?=C2=A0<br /></div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;Crypto++ Users" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">cryp= [email protected]</a>.<br /> To view this discussion on the web visit <a href=3D"https://groups.google.c= om/d/msgid/cryptopp-users/350eb1d6-f4f5-48a5-8086-d0e05c7fa86dn%40googlegro= ups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d= /msgid/cryptopp-users/350eb1d6-f4f5-48a5-8086-d0e05c7fa86dn%40googlegroups.= com</a>.<br /> ------=_Part_145046_539141463.1699530884029-- ------=_Part_145045_1319050201.1699530884029--