Ethereum: Why Schnorr signatures use the NONCE generation via SHA-256

The Schnorr signing system is one of the most common and effective digital signatures in Ethereum. However, there is no discussion on these signatures among developers and researchers about who was not selected for another popular option.

At first glance, it may be the opposite that the Schnorr signatures use the more commonly used method, such as HMAC or AES, through generations of non-256. But dive deeper in the background of this decision.

No problem

One of the primary challenges of digital signature systems is to produce a unique non -value for each signature operation. In other words, we need to make sure that the two signatures are not identical and that they can be easily secured with the same key. One way to deal with this problem is using the use of signature parameters parametered nonces parameters.

However, there are some problems with the Schnorr signatures to use the non-openings created through SHA-256:

• Sha-256 is not suitable for cryptographic purposes : Although Sha-256 is widely used in many applications, its key size and security requirements make it an inappropriate encryption for digital signatures.

• NO -NEW can not be created consistently : In Ethereum, the network block chain is constantly updated with new blocks, which means that the Nonce generation is a dynamic process. This brings the unpredictability to the signature system, which makes it susceptible to attacks.

Why was RFC6979 Variant chosen

Despite these challenges, Schnorr’s signature system was selected by default for a number of reasons:

• Powerful and fast : A simple RFC6979 variant uses an optimized algorithm that produces the non -value o (log n) time, which makes it much faster than other methods.

• Small Keys : Using Sha-256 to produce non-genes, we can reduce the size of the keys used for digital signatures, which makes them more efficient and cost-effective.

conclusion

In summary, the choice of Schnorr signatures The ETheruma in Etherum is based on a combination of efficiency, safety and practical aspects. Although it may be at first glance, the use of the Sha-256 to create nonsses offers a unique number of benefits that exceed the disadvantages. A simple RFC6979 variant is still an effective solution to digital signature systems in Ethereum.