ECDSA (Elliptic Curve Digital Signature Algorithm)
ECDSA (Elliptic Curve Digital Signature Algorithm) is the cryptographic algorithm underpinning transaction authorization on Bitcoin, Ethereum, and many other blockchains. It belongs to the family of public-key cryptography, meaning it uses a mathematically linked pair of keys: a private key, which only the owner holds, and a public key, which anyone can see.
When you send a transaction, ECDSA uses your private key to produce a unique digital signature. The network then uses your public key to verify that the signature corresponds to the private key associated with that address, confirming the transaction is authorized, without revealing the private key itself.
How ECDSA Signatures Work
ECDSA’s security rests on a mathematical problem called the Elliptic Curve Discrete Logarithm Problem (ECDLP). A private key is a randomly generated secret number. The corresponding public key is derived by multiplying that number by a fixed point on an elliptic curve. This operation is computationally straightforward in one direction but practically impossible to reverse using classical computers, meaning you cannot work backwards from a public key to derive the private key.
Major blockchains, including Bitcoin and Ethereum, use a specific curve called secp256k1 for their transaction-signing schemes. When signing a transaction, ECDSA combines a hash of the transaction data with your private key and a per-signature nonce, a value that must be unique and unpredictable for each signing operation, to produce a signature expressed as a pair of values. Anyone with your public key can verify the signature’s authenticity without learning anything about your private key.
ECDSA’s Limitations And What Comes Next
ECDSA’s security depends entirely on the ECDLP remaining hard to solve. Shor’s algorithm, run on a sufficiently capable quantum computer, could solve this problem efficiently, allowing an attacker to derive a private key from an exposed public key. On some blockchains and address formats, spending funds reveals the public key associated with the spending address. Once a public key is visible on-chain, those addresses face a long-term vulnerability if capable quantum hardware eventually emerges.
This is the core motivation behind post-quantum cryptography (PQC), which replaces ECDSA with algorithm families such as ML-DSA, built on math problems that quantum computers are not expected to solve efficiently.
