# Is there any proof for ECDSA signature algorithm?

Cryptography Asked by sanket1729 on December 19, 2021

Related: Is there an interactive version of ECDSA signature protocol like the Schnorr identification protocol?

As pointed out by @SEJPM, you can read more about security proofs for DSA/ECDSA family on this thread.

As for whether there exists an interactive protocol corresponding to DSA/ECDSA à la Schnorr identification/Schnorr signature, not that I am aware of. I would add that this is unlikely for two reasons:

1. The (unfortunate) reason for coming up with DSA/ECDSA was to bypass the patent on Schnorr signatures. Therefore its design was supposed be different enough from Schnorr.
2. If there were some kind of a sigma protocol then it is very likely that this would lead to a security proof (at least in the random-oracle model) as there exist standard methods to construct signatures from identification. Since we don't know a proof, one could say that there probably isn't an interactive protocol either (but this argument is very hand-wavy).

Answered by ckamath on December 19, 2021

## Related Questions

### Can I convert $F_{q^{12}}$ to $F_q$?

1  Asked on September 11, 2020 by user212942

### Are the GPS coordinates a good source of entropy?

2  Asked on September 9, 2020 by cipherx