dr.orlovsky on Nostr: My comparison of different elliptic-curve based signature schemes. Overall, #ECDSA ...

My comparison of different elliptic-curve based signature schemes.

Overall, #ECDSA and #Schnorr look poorly comparing to #EdDSA and #BLS; I see no reasons of selecting them. EdDSA is better than BLS due to support of adaptor signatures (and scriptless scripts like DLCs); BLS are better in size and possible Lamport combination.

Thinking in terms of #reNostr, the obvious choice should be not Schnorr but EdDSA (not BLS, since EdDSA are used in most of identity systems like SSH and GPG). Use of Schnorr sigs in #Nostr are noncence: public key re-use (a condition for a social network) leaks private key.