7

Schnorr Signatures and Signature aggregation is in the bitcoin technology roadmap. Schnorr Signatures was around the same time ECDSA is around.

Why wasnt Schnorr Signature Scheme implemented at the get-go instead? Why was ECDSA chosen over Schnorr Signatures in the inital design?

1 Answer 1

13

Why was ECDSA chosen over Schnorr Signatures in the inital design?

You'll need to ask Satoshi to know for sure, but my guess is simply because ECDSA was well standardized at the time, while no Elliptic Curve Schnorr based schemes were.

One of the reasons why an ECDSA standard existed but no EC-Schnorr ones may be patents. DSA was designed as a variant of Schnorr specifically to avoid Schnorr's patent on his signature scheme. By the time Bitcoin was created that patent had expired, but it was already too late - it was already much more appealing to use a well-known standardized scheme over designing your own cryptography (which would have been necessary to design a Schnorr based scheme).

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.