Given that secp256k1 is used to underpin the entire Bitcoin network (worth $174B as of today) -- it appears to offer demonstrably better security than other EC curves as no one has yet taken the bounty. It also stands to reason that researchers will actively look for vulnerabilities. If somehow broken, we will probably find out rather quickly as anyone with this knowledge will be highly incentivized to use it publicly.

Is there a reason that secp256k1 is not more widely used for gpg keys?

Is this curve also appropriate for encryption or are there additional risks in using this curve?


See https://exonum.com/blog/09-27-17-digital-signature/ for a short list of several issues with secp256k1 that may make it less desirable to use in certain applications than other ECC curves.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.