← Glossary

Security

What Is Elliptic-Curve Cryptography? Why Bitcoin Uses secp256k1

Elliptic-curve cryptography (ECC) is a public-key method that builds keys and signatures from arithmetic on points of an elliptic curve; Bitcoin uses the curve secp256k1, as do many Bitcoin-derived coins.

Key takeaways

The core idea

An elliptic curve is defined by an equation, and the points on it can be combined with a special kind of addition. Repeating that addition a chosen number of times is called scalar multiplication. In ECC, your private key is a large random number, and your public key is the point you get by multiplying a fixed starting point on the curve by that number. Computing the public key is fast. Recovering the private key from the public key means solving the elliptic-curve discrete logarithm problem, which has no known efficient method for well-chosen curves.

Why shorter keys

Because that problem is so hard, ECC reaches a given security level with much smaller keys than older systems such as RSA. A 256-bit elliptic-curve key offers strength comparable to a far longer RSA key. Shorter keys mean smaller signatures and faster operations, which matters on a blockchain where every node stores and checks them.

secp256k1

Bitcoin uses a specific curve called secp256k1, and signature standards such as BIP-340 are defined over it. Coins derived from Bitcoin's code, including Litecoin and Dogecoin, inherit the same curve for their ordinary keys and addresses. Ethereum also uses secp256k1 for its externally owned accounts, which is why a single kind of key can often work across many chains, although the address format differs.

Practical risks

The curve is not usually where wallets fail. The danger is weak randomness when generating keys, or reusing signing nonces, which can leak a private key. Use wallets that generate keys with a secure random source, and avoid generating keys by hand or from guessable phrases.

Example

Your private key is a 256-bit number k. Your public key is k times the curve's generator point G. Anyone can check a signature against the public key, but nobody can work backwards from the public key to k.

Put it into practice

Use a wallet that generates keys safely

Key quality depends on secure randomness. Scrypt Wallet gives you a recoverable key for each coin; back each one up, and never reuse keys from other tools.

Create a free wallet Get Scrypt for Android

Sources and verification

Last reviewed 2026-10-02 by the Scrypt Wallet team. The factual claims on this page, and where each comes from:

  1. Elliptic-curve cryptography relies on the difficulty of the elliptic-curve discrete logarithm problem and achieves security with smaller keys. [1]
  2. BIP-340 defines Schnorr signatures over the secp256k1 curve. [2]
  3. Ethereum externally owned accounts are controlled by private keys. [3]

Sources

  1. Elliptic-curve cryptography · Wikipedia · secondary source
  2. BIP-340: Schnorr signatures for secp256k1 · bitcoin/bips on GitHub · primary source
  3. Ethereum accounts · ethereum.org · secondary source

Primary sources are protocol papers, specifications, source code or a project's own documentation; secondary sources are wikis and explainers. We checked each claim against the source text on the review date. Found an error? Tell us and we will correct it.

Frequently asked questions

Is ECC the same as encryption?

It is a family of public-key techniques used for signatures and key exchange. In Bitcoin it is used for signatures, not to encrypt data.

Why secp256k1 and not another curve?

It was chosen for Bitcoin and has been kept for compatibility. Other chains use other curves.

Can the same key work on Bitcoin and Ethereum?

Both use secp256k1, so the same private key can derive keys on each, though addresses are computed differently. Reusing a key across chains is not advised.

Related terms

Go deeper

Written by the Scrypt Wallet team · Updated 2026-10-02. General education, not financial, tax or legal advice.