How Elliptic-Curve Signatures Work: A Toy ECDSA Example

A deliberately insecure curve makes the signing arithmetic small enough to follow. The verifier needs the message and public key, but neither signing secret.