yeah, i seem to recall that there is a problem with the koblitz curve with relation to hierarchic deterministic keychain derivations, some weakness that made it easier to figure out upstream keys if you breach a downstream one
also if i remember correctly, the signature calculation for ed25519 is a little faster than even schnorr secp256k1, though that might just be because of using blake2, now i think about it
we have secp256k1 schnorr signatures in our relay and client libraries, and they are battle tested, and also most platforms now have a SIMD implementation of SHA256 which closes the gap a lot
there is a big element of contrarian anti-hipster in the nostr and bitcoin culture though, *except* for a large part of those who are instrumental in approving everything and elevated to high visibility artificially by the people running primal
not trusting things that are beeing deceptively promoted seems like a wise tactic in my view
progressivism in all its forms seems to quickly devolve into debauchery
mleku
npub1fj…mleku
2025-04-08 06:30:39
in reply to nevent1q…v6zx
Author Public Key
npub1fjqqy4a93z5zsjwsfxqhc2764kvykfdyttvldkkkdera8dr78vhsmmlekuPublished at
2025-04-08 06:30:39Event JSON
{
"id": "632d4433de5857e871760fbfd92a02e6d68696f8816ecda34cb660e418ecd2e6",
"pubkey": "4c800257a588a82849d049817c2bdaad984b25a45ad9f6dad66e47d3b47e3b2f",
"created_at": 1744093839,
"kind": 1,
"tags": [
[
"e",
"0a8f44d66aa2ceb06000cea92283b9e086677872ed0e76e3624a24035b2a93be",
"wss://theforest.nostr1.com/",
"root",
"ee11a5dff40c19a555f41fe42b48f00e618c91225622ae37b6c2bb67b76c4e49"
],
[
"e",
"49503ef18f4f016c84781a78f271aa4d5ebb1db389c796aa1c7fc83a3aa0da0e",
"wss://theforest.nostr1.com/",
"reply",
"ee11a5dff40c19a555f41fe42b48f00e618c91225622ae37b6c2bb67b76c4e49"
],
[
"p",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
],
[
"p",
"ee11a5dff40c19a555f41fe42b48f00e618c91225622ae37b6c2bb67b76c4e49"
],
[
"client",
"jumble"
]
],
"content": "yeah, i seem to recall that there is a problem with the koblitz curve with relation to hierarchic deterministic keychain derivations, some weakness that made it easier to figure out upstream keys if you breach a downstream one\n\nalso if i remember correctly, the signature calculation for ed25519 is a little faster than even schnorr secp256k1, though that might just be because of using blake2, now i think about it\n\nwe have secp256k1 schnorr signatures in our relay and client libraries, and they are battle tested, and also most platforms now have a SIMD implementation of SHA256 which closes the gap a lot\n\nthere is a big element of contrarian anti-hipster in the nostr and bitcoin culture though, *except* for a large part of those who are instrumental in approving everything and elevated to high visibility artificially by the people running primal\n\nnot trusting things that are beeing deceptively promoted seems like a wise tactic in my view\n\nprogressivism in all its forms seems to quickly devolve into debauchery",
"sig": "4809264cb69d410ad9ae0b173f7ba95e3a161673c915e50375a9ba5cbde7464ef9e8f2d6476621675b84ee0da303ef6c2a07e4ef7888355c4e6d381ca28e54b8"
}