1.5 KiB
Public keys in Monero
!!! danger Article author is nowhere close to being a cryptographer. Be sceptical on accuracy.
!!! warning Article is a work in progress.
Public key is deterministically derived from private key based on Ed25519 curve with a little Monero-specific twist.
Public key is meant to be shared. Assuming correct implementation, it is not practically possible to recover private key from public key.
Public key is a point (x,y) on the elliptic curve.
In equations points are represented by uppercase letters.
In user-facing contexts, public key is encoded in a little-endian hexadecimal form, like:
016a941812293cf9a86071060fb090ab38d67945e659968cb8cf30e1bc725683
Deriving public key
Say:
- P is a public key
- x is a private key
- G is a "base point"; this is simply a constant specific to Ed25519; this point lies on the elliptic curve
Then:
P = xG
The public key is simply the base point (G) multiplied by the private key (x). Multiplying the point is adding the point to itself a number of times.
However, the addition is not a simple vector addition. It has a very specific definition nicely described in this article. What is important is that result of addition is always a point on the curve. For example, G + G is another point on the curve.