Ed25519
More info
- Creator
- Daniel J. Bernstein et al.
- Released
- Type
- Signature scheme
- License
- Public domain
- Spec
- RFC 8032
- Wikipedia
- en.wikipedia.org
Fast deterministic signature scheme based on the Edwards curve Curve25519 — 32-byte public keys, 64-byte signatures, brutal speed.
Bernstein et al. 2011. EdDSA flavour: signatures are deterministic (same message + key → same signature), which eliminates the entire class of vulnerabilities around poor RNGs that have burned ECDSA (Sony PS3, several Bitcoin cases). Constant-time implementation is easy.
Standard since OpenSSH 6.5 (2014), TLS 1.3 (RFC 8446), Signal, WireGuard, Tor, Cosign. Default recommendation for new SSH keys and cert signing.