ECDSA elliptic curve cryptography par inhisar karti hai, jo RSA jese purane systems ke barabar ki security faraham karti hai, lekin is mein key sizes kaafi chote hote hain. Yeh efficiency blockchains ke liye isay amli banati hai, jahan har transaction ki hazaron nodes ke zariye toseeq karni hoti hai.
ECDSA mein teen marahil shamil hote hain. Pehla, key generation: system ek private key banata hai, jo keh tasadufi tor par muntakhib kiya gaya ek number hota hai, aur elliptic curve multiplication ka istemal karte huwe is se public key hasil karta hai. Private key ko makhfi rakhna lazmi hai.
Public key ko aazadana tor par share kiya ja sakta hai. In dono ke darmiyan mathematical taluq ek-tarfa hota hai: private key se public key nikalna aasan hota hai, lekin is amal ko ulta karna computational tor par na mumkin hota hai.
Teesra, toseeq: public key, message aur signature ka hamil koi bhi shakhs is baat ki toseeq kar sakta hai keh signature mutaliqa private key se tayar kiya gaya tha. Toseeq ke amal mein private key zahir nahi hoti. Yahi wajah hai keh ECDSA public blockchains ke liye munasib hai, jahan har node ko lazmi tor par transactions ki toseeq karni hoti hai.
ECDSA adaigiyon ke ilawa crypto ke deegar contexts mein bhi istemal hota hai, jin mein tasdeeq ke liye message signing aur multi-signature schemes shamil hain, jahan transaction ki tasdeeq karne ke liye kai parties ke signatures lazmi hote hain.
ECDSA durust tareeqe se nafiz kiye jane par computational tor par mehfooz hai, lekin is ki security ka inhisar nonce ke mayaar par nihayat eham tor par hota hai. Agar ek hi nonce ko do mukhtalif messages par signature karne ke liye istemal kiya jaye, to dono signatures se private key ko mathematical tor par recover kiya ja sakta hai.
Yeh sirf nazriyati khatra nahi hai: 2013 mein Android ke random number generator mein ek bug ki wajah se kuch Bitcoin wallets ne duplicate nonces generate kiye, aur attackers ne private keys hasil kar ke funds chori kar liye.
Poori tarah ek hi nonce dobara istemal na hone ki soorat mein bhi nonce ki ghair-mayaari generation private keys ko zahir kar sakti hai. Jadeed wallets deterministic nonce generation (RFC 6979) istemal karte hain, jo private key aur message se nonce hasil karti hai, aur is tarah ghalti se nonce ko dobara istemal karne ka khatra khatam ho jata hai.
Mustaqbil mein, ECDSA ki jagah post-quantum signature schemes le sakti hain, kiun keh quantum computers nazriyati tor par elliptic curve discrete logarithm problem ko hal kar sakte hain jis par ECDSA rely karta hai. Filhal, ECDSA Bitcoin aur Ethereum mein transaction ki tasdeeq ka mayaar hai.
Yeh sirf aik bar istemal honay wali aik bay-tarteeb si string ya koi number hota hai jo verification kay ma...