SR25519 と ED25519 で、すべて 0 の公開鍵が既知の非公開鍵を所有しているのはなぜですか?
Yes, it’s a consequence of the Edwards curve models used, but secp256k1 is a short Weierstrass curve. Ed25519 has the identity (0,1) in Affine coordinates, meaning (0,1) + (0,1) = (0,1) in Ed25519. It little endian encodes as [1u8, 0u8, …, 0u8], not all zeros. In fact [0u8; 32] decodes as (1,0) because -1 is…