ECDSA

Elliptic Curve Digital Signature Algorithm. The signature scheme Bitcoin uses on the secp256k1 curve and every Ethereum externally-owned account uses. Widely deployed in TLS, hardware wallets, and YubiKeys. Requires careful randomness during signing (RFC 6979 defines a deterministic variant). Verification is moderately expensive; no native aggregation.