The author explores the intriguing world of cryptographic schemes, focusing on the recovery of public keys from signatures. ECDSA allows for the recovery of a public key from a single signature, while RSA requires two signatures. The discussion then delves into Schnorr signatures and Dilithium, highlighting their unique properties that make public key recovery challenging. SPHINCS+ and Unbalanced Oil and Vinegar are also examined, showcasing their innovative approaches to signature schemes. The author concludes by emphasizing the importance of designing protocols resilient to key recovery attempts, even in schemes that do not leak public keys algebraically. A fascinating exploration of the nuances of signature schemes and public key recovery.
https://keymaterial.net/2024/06/15/reconstructing-public-keys-from-signatures/