原推:@TrustlessState @ArthurB @danrobinson But people “born and raised” in elliptic curve land are more likely to prefer additive notation, because it’s more convenient.
Eg. in Schnorr signatures:
Sign: s = r – x * e
Verify: R = G * s + X * e
In additive notation, it’s easier to see the “symmetry” between the two eqs.
https://twitter.com/VitalikButerin/status/1571542890337415170