Ed25519

E192669

Ed25519 is a high-speed, high-security elliptic-curve digital signature scheme widely used in modern cryptographic protocols and software.

All labels observed (2)

Label Occurrences
Ed25519 canonical 9
EdDSA 1

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf digital signature scheme
elliptic-curve signature scheme
public-key cryptography algorithm
advantageOverRSA faster operations at similar security levels
smaller keys
basedOn Twisted Edwards curve
category EdDSA
cofactor 8
comparedTo RSA
coordinateSystem Twisted Edwards coordinates
curveEquation -x^2 + y^2 = 1 + dx^2y^2 over GF(2^255 - 19)
designedToReplace older elliptic-curve signature schemes such as ECDSA
designGoal high performance
high security
side-channel resistance
simplicity of implementation
field prime field GF(2^255 - 19)
fullName EdDSA
surface form: Edwards-curve Digital Signature Algorithm over Curve25519
hashFunction SHA-512
introducedBy Bo-Yin Yang
Daniel J. Bernstein
Niels Duif
Peter Schwabe
Tanja Lange
keyType private-key
public-key
order l = 2^252 + 27742317777372353535851937790883648493
privateKeySize 32 bytes
property not vulnerable to known practical attacks as of 2024
resistant to many common implementation pitfalls
publicationYear 2011
publicKeySize 32 bytes
securityLevel approximately 128-bit security
signatureSize 64 bytes
signatureType deterministic
standardizationBody Internet Engineering Task Force
surface form: IETF
standardizedIn RFC 8032
supports fast key generation
fast signing
fast verification
usedIn OpenBSD
OpenSSH
Signal protocol
TLS implementations
WireGuard VPN protocol
surface form: WireGuard

age file encryption tool
various cryptocurrencies
usesCurve Curve25519-based schemes
surface form: Curve25519
vulnerabilityStatus no major cryptanalytic breaks publicly known as of 2024

How these facts were elicited

Referenced by (10)

Full triples — surface form annotated when it differs from this entity's canonical label.

DNSSEC supportsAlgorithm Ed25519
DNSSEC ZSK algorithm Ed25519
this entity surface form: EdDSA
Ed448 comparedTo Ed25519
OpenSSH supportsKeyType Ed25519
EdDSA commonlyUsedWithCurve Ed25519
EdDSA variant Ed25519