Ed448

E192670

Ed448 is a modern high-security elliptic-curve digital signature algorithm designed for strong cryptographic assurance and efficient performance.

All labels observed (1)

Label Occurrences
Ed448 canonical 3

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf digital signature algorithm
elliptic-curve signature scheme
basedOn elliptic-curve cryptography
belongsToCategory public-key cryptography
comparedTo Ed25519
curveEquationType twisted Edwards curve
curveFieldSize 448-bit prime field
definedInSection RFC 8032
surface form: RFC 8032, Section 5
designedFor efficient performance
high security
designGoal constant-time implementations
robustness against misuse of randomness
simplicity of implementation
encoding compressed point representation
little-endian byte encoding for field elements
fullName Curve448
surface form: Edwards-curve Digital Signature Algorithm over Curve448
hashFunctionUsed SHAKE256
introducedIn 2010s
keyDerivation public key derived by scalar multiplication of base point
keyGenerationMethod private key is uniformly random 57-byte string
memberOfFamily EdDSA
offersHigherSecurityThan Ed25519
privateKeySize 57 bytes
property cofactor 4
collision-resistance depends on SHAKE256
designed to resist side-channel attacks with proper implementation
large prime-order subgroup
not vulnerable to small-subgroup attacks when implemented as specified
publicKeySize 57 bytes
recommendedFor long-term security applications
requires constant-time big-integer arithmetic for side-channel resistance
secure implementation of SHAKE256
securityLevel approximately 224-bit classical security
signatureComputation uses nonce derived from private key and message via hash
signatureSize 114 bytes
standardizedBy Internet Engineering Task Force
surface form: IETF
standardizedIn RFC 8032
suitableFor hardware implementations
software implementations
supports batch verification
deterministic signatures
prehash variant Ed448ph
usedIn SSH (optional signature algorithm in some implementations)
TLS 1.3 (optional signature algorithm)
usesBasePoint fixed generator on Curve448
usesCoordinateSystem twisted Edwards coordinates
usesCurve Curve448
verificationMethod checks group equation involving public key, signature, and message hash

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

DNSSEC supportsAlgorithm Ed448
EdDSA variant Ed448