Join Nostr
2026-10-09 19:33:07 UTC
in reply to

waxwing on Nostr: Yes. The quantum attack, any attack breaking ECDLP, it's worse. An ECDSA specific ...

Yes. The quantum attack, any attack breaking ECDLP, it's worse.

An ECDSA specific algorithmic attack, it's better.

Example: with ECDSA you can create a signature that validates against two different pubkeys. With Schnorr you can't do that.