Hacker News new | ask | show | jobs
by ecesena 3106 days ago
Bitcoin also hashes twice, i.e. it computes sha256(sha256(.)). Supposedly, this is to protect against extension attacks [1].

Was wondering, any specific reason to choose RSA vs ECDSA? Signatures would be smaller.

[1] https://en.wikipedia.org/wiki/Length_extension_attack

1 comments

No good reason for RSA vs ECDSA. I was just more familiar with RSA, but apparently pycryptodome supports ECDSA as well, so I guess the change should be minimal.