Why it matters

Ed25519 is modern signature default. Understanding shapes crypto.

Advertisement

The architecture

Bernstein et al. 2011.

EdDSA on Edwards curve.

Deterministic signatures (no nonce reuse risk).

Ed25519 flowKey genseed -> keypairSigndeterministicVerifypoint checkDeterministic + fast + secure; TLS 1.3, SSH, Signal all support
Ed25519.
Advertisement

How it works end to end

Bernstein et al. 2011.

Deterministic: no nonce reuse.

~30k signs/sec.

RFC 8032.