Read this lesson as text
Bitcoin and secp256k1
Cryptography · Axiom Academy
REAL WORLD Bitcoin and secp256k1 How elliptic curve cryptography secures the world's first cryptocurrency The Mathematics Behind Bitcoin When Satoshi Nakamoto designed Bitcoin in 2008, they needed a way to secure digital money without a central authority. The solution? Elliptic curve cryptography using a specific curve called secp256k1 . Bitcoin's entire security model—from wallet addresses to transaction signatures—relies on the mathematical hardness of the Elliptic Curve Discrete Logarithm Problem (ECDLP). If you can solve ECDLP efficiently, you can steal anyone's Bitcoin. Let's see how this works! Bitcoin doesn't use just any elliptic curve. It uses secp256k1 , defined by the equation: This curve is defined over a large prime field with . Why did Satoshi choose secp256k1 instead of NIST-standardized curves? The secp256k1 curve has three key advantages: The simple coefficients (a=0, b=7) are verifiably random —they're not magic numbers that could hide a backdoor. This transparency was crucial for a trustless system like Bitcoin. From Private Key to Bitcoin Address When you create a Bitcoin wallet, you're going through a cryptographic transformation chain. Here's how a random number becomes a Bitcoin address: Notice the one-way nature : Given the private key, computing the address is easy. But given the address, finding the private key requires solving the ECDLP—computationally infeasible! Compressed vs Uncompressed Public Keys
This is the written version of the interactive lesson above. See the full Cryptography course.