What Is the Computational Problem That Makes This Derivation Hard?

The computational problem is the Elliptic Curve Discrete Logarithm Problem (ECDLP). Given two points on the curve, P and G, where P = d × G, the problem is to find the integer scalar d (the private key).

For the secp256k1 curve used in Bitcoin, the size of the number d is so large that there is no known efficient algorithm to solve for it in a reasonable amount of time, even with massive parallel computing.

What Is the Mathematical Basis for the One-Way Function?
What Is the Discrete Logarithm Problem?
What Makes the ECDSA Process “One-Way” and Why Is This Critical for Security?
Can the Private Key Be Derived from the Public Key, and Why Is This Crucial?
What Mathematical Problem Is the Security of ECDSA Based Upon?
Why Is This One-Way Function Computationally Infeasible to Reverse?
What Is the Specific Elliptic Curve Standard Commonly Used in Bitcoin?
What Is the Role of the “Elliptic Curve” in the Security of ECDSA?

Glossar