Tags: crypto 

Rating:

Use that k * g = k * (0,2) = (0, 2^k). Then computing using Pohlig-Hellman.

Original writeup (https://gist.github.com/grocid/a8c77caf7c60eceda6ad1513709d0eb7).