In this track: Cryptography with intuition
advanced · 4 MIN READ

Elliptic curve intuition

A public key is derived through a one-way group operation.

LET’S PICTURE IT

Repeated movement under strict mathematical rules can be easy to perform and hard to reverse.

SEE IT FOR YOURSELF
From a public address to a verified signatureStep 1 / 4
From a public address to a verified signaturePublic address0x0000…0001Share to receiveAnother personCan read the addressCannot sign for youPublic identifier ≠ secret authorizationLocal signerPrivate key stays hereSign the chosen requestSigned requestMessage + signatureSecret key not includedThe moving packet represents a signature, not a keySignatureCheck the exact messageCheck the signing contextVerificationAuthorization checkedIntent still mattersValidity and safety are different questionsWallet interfaceReads public dataRequests authorizationNetwork stateBalances and recordsIndependent verificationNo wallet is connected in this local illustration

An address is public receiving information. It is not the private key that authorizes actions.

Animated local teaching model. No wallet, RPC or live blockchain data. Some labels and hashes are abbreviated for readability.

Use the analogy carefully

Elliptic-curve cryptography uses algebraic group operations over a finite field. A smooth curve drawn on paper is only a visual aid, not the actual space of Ethereum key values.

Separate scalar and point

A private key is a suitable secret scalar. Multiplying a fixed generator point by it produces a public point under the curve’s rules.

Understand the difficult inverse

Recovering the scalar from the public point is the discrete-logarithm problem for the chosen group. Ordinary division of displayed coordinates does not reverse the process.

Use established implementations

Correct key generation, signing nonces and validation require careful cryptographic code. A learning analogy is not a reason to implement a production signer from scratch.

Inspect the distinction

secret scalar d
fixed generator G
public point Q = d · G

This is group notation, not ordinary multiplication of coordinates.

These are local teaching values, not a signature request or a live-chain lookup.

TURN UNDERSTANDING INTO PRACTICEOpen the Keccak-256 →
QUICK CHECK · NO PRESSURE

Is a public key obtained by ordinary coordinate division?

Your progress stays in this browser.
Keep exploring the original referencewww.secg.org ↗

Original explanations by EtherTools. Examples are educational and source-linked; this site is independent of the Ethereum Foundation. Our approach.