Public-key derivation
Ed25519 begins with a 32-byte secret input. SHA-512 expands that value, specified bits are adjusted, and the resulting scalar is multiplied by the curve's standard base point. The encoded point is the 32-byte public key. This derivation is one-way in practical use: publishing the public key does not disclose the secret input.