EdDSA for more curves

Daniel J.  Bernstein; Simon Josefsson; Tanja Lange; Peter Schwabe; Bo-Yin Yang

Paper 2015/677 Original: eprint.iacr.org/2015/677 ↗

EdDSA for more curves

Daniel J. Bernstein

Simon Josefsson

Tanja Lange

Peter Schwabe

Bo-Yin Yang

Abstract

The original specification of EdDSA was suitable only for finite fields Fq with q mod 4 = 1. The main purpose of this document is to extend EdDSA to allow finite fields Fq with any odd q. This document also extends EdDSA to support prehashing, i.e., signing the hash of a message.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Preprint.
History: 2015-07-05: last updated; 2015-07-05: published
Short URL: https://ia.cr/2015/677
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2015/677,
      author = {Daniel J.  Bernstein and Simon Josefsson and Tanja Lange and Peter Schwabe and Bo-Yin Yang},
      title = {EdDSA for more curves},
      howpublished = {Cryptology {ePrint} Archive, Paper 2015/677},
      year = {2015},
      url = {https://eprint.iacr.org/2015/677}
}