EdDSA

E299184

EdDSA (Edwards-curve Digital Signature Algorithm) is a modern public-key signature scheme designed for high performance, security, and resistance to side-channel attacks, commonly used with curves like Ed25519.

All labels observed (3)

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf digital signature scheme
public-key cryptographic algorithm
advantage fast signing
fast verification
small key sizes
small signature sizes
application SSH
TLS
cryptographic libraries
avoids need for high-quality randomness per signature
basedOn Schnorr signature scheme
benefitOverECDSA better resistance to side-channel attacks when implemented correctly
deterministic nonce derivation
simpler implementation
category elliptic-curve signature scheme
commonlyUsedWithCurve Ed25519
Ed448
contrastWith Elliptic Curve Digital Signature Algorithm
surface form: ECDSA
curveForEd25519 Twisted Edwards curve
surface form: Curve25519 in Edwards form
curveForEd448 Curve448 in Edwards form
designGoal deterministic signatures
high performance
high security
resistance to side-channel attacks
fullName Twisted Edwards curve
surface form: Edwards-curve Digital Signature Algorithm
introducedBy Bo-Yin Yang
Daniel J. Bernstein
Niels Duif
Peter Schwabe
Tanja Lange
keyType private-key
public-key
nonceDerivation derived from private key and message via hash
property strongly unforgeable under chosen-message attacks (SUF-CMA) when properly instantiated
securityBasis elliptic curve discrete logarithm problem
signatureComponent R value
S value
signatureGeneration deterministic
standardizationBody Internet Engineering Task Force
surface form: IETF
standardizedIn RFC 8032
supports batch verification of signatures
usesCoordinateRepresentation compressed public keys
usesCoordinateSystem Edwards coordinates
usesCurveType Twisted Edwards curve
surface form: twisted Edwards curves
usesHashFunction cryptographic hash function
variant Ed25519
Ed448
yearProposed 2011

How these facts were elicited

Referenced by (5)

Full triples — surface form annotated when it differs from this entity's canonical label.

Curve25519-based schemes supportsProtocol EdDSA
this entity surface form: VXEdDSA
Ed25519 category EdDSA
Ed25519 fullName EdDSA
this entity surface form: Edwards-curve Digital Signature Algorithm over Curve25519
Ed448 memberOfFamily EdDSA