BlockchainUpdated: Apr 1, 2026

Elliptic Curve

An elliptic curve is a mathematical curve used in elliptic curve cryptography (ECC) for generating secure public-private key pairs in blockchains, like secp256k1 in Bitcoin.

Also known as:ECCsecp256k1ed25519

What Is a Elliptic Curve?

A Elliptic Curve is a smooth, mathematical curve defined by the equation y² = x³ + ax + b, where a and b are constants. Despite the name, it does not form an ellipse. Cryptographers use these curves in elliptic curve cryptography (ECC) to create secure keys.

Points on the curve form a group under a special addition operation. Add two points by drawing a line through them; the third intersection point reflects over the x-axis to yield the sum. Scalar multiplication repeats this addition. A private key is a secret scalar; multiply it by a generator point to get the public key. Security relies on the elliptic curve discrete logarithm problem (ECDLP), which is computationally infeasible to reverse.

Elliptic curves matter in blockchain because they enable strong security with small keys. A 256-bit ECC key matches the strength of a 3072-bit RSA key. This efficiency suits resource-limited devices. Bitcoin uses the secp256k1 curve for signatures. Other blockchains adopt curves like ed25519 for faster operations.

Key characteristics include finite fields for discrete points and careful parameter selection to resist attacks. Common types appear in synonyms: ECC for the cryptography method, secp256k1 for Bitcoin, and ed25519 for high-speed signing.

Real-World Examples

Example 1: Bitcoin Key Generation

Wallet software generates a random 256-bit private key. It performs scalar multiplication on the secp256k1 elliptic curve's generator point G to compute the public key: PublicKey = private_key * G. Users then derive a Bitcoin address from this public key.

Example 2: Signing a Transaction

To authorize a Bitcoin transfer, select a random nonce k. Compute point R = k * G on the secp256k1 curve. Combine R with a hash of the transaction and the private key to form an ECDSA signature. Nodes verify this using only the public key.

Example 3: Hardware Wallet Security

Ledger devices generate private keys on the secp256k1 elliptic curve within a secure element chip. To sign a transaction, the device computes the signature internally and sends only the result to the host computer. This keeps the private key offline.

Example 4: Faster Signatures with ed25519

Blockchains like Solana use the ed25519 elliptic curve for transaction signing. It enables high-speed verification: a private key multiplies the base point to yield the public key, supporting thousands of signatures per second on resource-constrained nodes.