HD Wallets have a flaw that revealing a private key and its parent master public key will reveal its parent master private key. (Described here[1] and here[2]).
Isn't there a similar concept with master public key and master private key that does not suffer from this issue. (Does not have to be ECDSA. I just want a deterministic private-public keypair generator that can publish its master public key).
Depending on what your use case is, this might be useful:
https://bitcointalk.org/index.php?topic=916441.0The scheme described by Gus Gutoski will protect a parent private key from the release of a specific number of its child private keys.