User xorhash

3 votes

Weaker alternative to Ed25519?

answered Apr 8, 2020 at 16:42

3 votes

Compact ROM with space only for EdDSA. How to fit a key exchange algorithm inside?

answered Oct 11, 2020 at 6:34

5 votes

Accepted

Can the EdDSA signature scheme be customized with OpenSSL?

answered Jul 12, 2020 at 17:39

2 votes

Accepted

Is it possible to verify a clearsigned message with a short public key (fingerprints)?

answered Apr 28, 2020 at 5:22

6 votes

Accepted

ECDSA signature verification checks

answered Apr 24, 2020 at 19:34

5 votes

Accepted

When using Ristretto or Decaf with Ed25519 and Ed448, do scalars still need pruning/trimming/clamping?

answered Apr 4, 2020 at 6:59

8 votes

Accepted

Is there any patent free EC point compression available? If not, should I GPL/LGPL my code?

answered Apr 18, 2020 at 9:19

1 vote

How to specify last $t$ bits are only sent when a signature is sent?

answered Apr 18, 2020 at 7:09

2 votes

Test Vectors for XEdDSA

answered Apr 17, 2020 at 17:10

0 votes

Accepted

What are the extended homogeneous coordinates in the EdDSA specification?

answered Apr 17, 2020 at 15:56

4 votes

Construction of secure Elliptic Curve subgroup over a much larger field

answered Apr 17, 2020 at 7:38

2 votes

Unique GCM/CCM initial counters without recipient side message counters

answered Apr 17, 2020 at 8:21

4 votes

Accepted

Why does ed25519 seem to accept and use 96-byte / 384-bit signatures?

answered Mar 31, 2020 at 14:09

Stack Exchange Network

13 Answers

Weaker alternative to Ed25519?

Compact ROM with space only for EdDSA. How to fit a key exchange algorithm inside?

Can the EdDSA signature scheme be customized with OpenSSL?

Is it possible to verify a clearsigned message with a short public key (fingerprints)?

ECDSA signature verification checks

When using Ristretto or Decaf with Ed25519 and Ed448, do scalars still need pruning/trimming/clamping?

Is there any patent free EC point compression available? If not, should I GPL/LGPL my code?

How to specify last $t$ bits are only sent when a signature is sent?

Test Vectors for XEdDSA

What are the extended homogeneous coordinates in the EdDSA specification?

Construction of secure Elliptic Curve subgroup over a much larger field

Unique GCM/CCM initial counters without recipient side message counters

Why does ed25519 seem to accept and use 96-byte / 384-bit signatures?