Skip to content

Clarify use of “Ed25519” in OpenPGP

jethrogb requested to merge jethrogb/rfc4880bis:ed25519-clarification into main

Ed25519 specifies that an actual message, not a digest, should be used as the input to the signature function. This is not done in the example in Appendix A. Based on discussion in #48 (closed), !68 (merged) it appears this is intended. Therefore, in this MR: Unambiguously describe which EdDSA instantiation is used in OpenPGP, clarify how this is non-standard, and what the security implications are.

Actually fixes #31 (closed)

Refs #48 (closed), !68 (merged)

Merge request reports