“the choice of secp256k1 over r1 (P-256) in bitcoin (and ethereum) was heavily…”
Pete Kim @petejkimX
Archived text
the choice of secp256k1 over r1 (P-256) in bitcoin (and ethereum) was heavily influenced by the fear of an NSA backdoor. this has been very annoying for wallet developers because the secure enclave chips found in most consumer devices only support r1. passkeys use r1 as well.
turns out there is no backdoor after all... amazing work by anthropic.