Re: EdDSA Ed25519/Ed448 for XML Digital Signatures

Simon Josefsson <[email protected]> Fri, 04 Dec 2015 10:01:45 +0100

Newsgroups	gmane.text.xml.xmlsec
Message-ID	<[email protected]>

Hi.  Thanks for response.  I believe libgcrypt supports Ed25519, so that
ought to be straightforward.  I don't believe OpenSSL, NSS, or GnuTLS
supports it yet.  There is support in Nettle, so having support in
GnuTLS is probably not that far off.

I agree that this is probably not a big priority for xmlsec users, but
it may become.  I think I'll submit the draft to IETF as-is, and then
wait for implementations to materialize.  I don't think it will be moved
forward without implementation feedback.  The Apache Santuario's
response was similar to yours.  Are you aware of any other significant
XML Security libraries, btw?

/Simon

tor 2015-12-03 klockan 16:54 -0800 skrev Aleksey Sanin:
> Hi Simon,
> 
> Adding a new algo to xmlsec is pretty straightforward (if the underlying
> crypto engine supports it). Said that, I don't know if this is something
> important for xmlsec users.
> 
> Best
> 
> Aleksey
> 
> On 12/2/15 6:25 AM, Simon Josefsson wrote:
> > Hi.  I have prepared a writeup on how to add the EdDSA Ed25519/Ed448
> > public-key digital signature algorithm to XMLDSIG.
> > 
> > https://mailarchive.ietf.org/arch/msg/curdle/Ylertitv43TdDrcm4ufh2LxdBjM
> > 
> > Are you interested in implementing this?  If so, your feedback on the
> > description is appreciated.  If there is interest among XMLDSIG
> > implementers, I would turn this into a proper IETF draft.
> > 
> > /Simon
> > 
> > 
> > 
> > _______________________________________________
> > xmlsec mailing list
> > [email protected]
> > http://www.aleksey.com/mailman/listinfo/xmlsec
> >

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

signature.asc (application/pgp-signature, 473 B)