Oddbean new post about | logout
▲ ▼
mleku | 4 months ago (raw) | root | parent | reply | flag 
 also, yes, you don't need that bit for signature verification, that's one of the neat things about Schnorr signatures

but it does not apply to ECDH
▲ ▼
mleku | 4 months ago (raw) | root | parent | reply | flag 
 two points though

one, having to decrypt the whole message and then discover you need to flip the bit is wasteful of computation and time

two, it still doesn't fix the problem of two 3 key users with software imputing 2 keys