From ac5c8666b25fda0bb2f50682970cf6202ed9310e Mon Sep 17 00:00:00 2001
From: Tony Arcieri <bascule@gmail.com>
Date: Thu, 2 Jul 2026 07:39:36 -0600
Subject: [PATCH] ecdsa: use `MulByGeneratorVartime` for public key recovery

Uses the `mul_by_generator_and_mul_add_vartime` method which can
leverage wNAF and/or variable-time basepoint tables for optimal
performance
---
 ecdsa/src/recovery.rs | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/ecdsa/src/recovery.rs b/ecdsa/src/recovery.rs
index f4bccb8d..2bfba2df 100644
--- a/ecdsa/src/recovery.rs
+++ b/ecdsa/src/recovery.rs
@@ -10,12 +10,11 @@ use {
     },
     digest::{Digest, Update},
     elliptic_curve::{
-        AffinePoint, CurveArithmetic, FieldBytes, FieldBytesSize, Group, PrimeField,
+        AffinePoint, CurveArithmetic, CurveGroup, FieldBytes, FieldBytesSize, PrimeField,
         ProjectivePoint, Scalar,
         bigint::CheckedAdd,
         field,
-        ops::Invert,
-        ops::LinearCombination,
+        ops::{Invert, MulByGeneratorVartime},
         point::DecompressPoint,
         sec1::{self, FromSec1Point, ToSec1Point},
         subtle::CtOption,
@@ -383,8 +382,8 @@ where
         let r_inv = *r.invert();
         let u1 = -(r_inv * z);
         let u2 = r_inv * *s;
-        let pk = ProjectivePoint::<C>::lincomb(&[(ProjectivePoint::<C>::generator(), u1), (R, u2)]);
-        Self::from_affine(pk.into())
+        let pk = ProjectivePoint::<C>::mul_by_generator_and_mul_add_vartime(&u1, &u2, &R);
+        Self::from_affine(pk.to_affine())
     }
 }