[openssl-users] Ed25519 and X.509

Felipe Gasper felipe at felipegasper.com
Sat Jul 28 14:18:55 UTC 2018


Ah ok. Thank you for clarifying!

-FG

> On Jul 28, 2018, at 7:42 AM, Matt Caswell <matt at openssl.org> wrote:
> 
> 
> 
>> On 28/07/18 12:23, Felipe Gasper wrote:
>> I knew about this one. I see OIDs here for the key algorithm, but not the signature/hash algorithm .. ? I’m looking for the OID that precedes the signature in an X.509 structure.
> 
> There is an example of a certificate signed with Ed25519 in that
> document. As noted in the text:
> 
>  "The same algorithm identifiers are used for identifying a public key,
>   identifying a private key and identifying a signature (for the two
>   EdDSA related OIDs). "
> 
> Note, these OIDS are for EdDSA in pure mode so there is no hash, and
> hence no need for a separate OID for the sig/hash pair.
> 
> Matt
> 
> 
>> 
>> Thank you!
>> 
>> -FG
>> 
>>> On Jul 28, 2018, at 7:10 AM, Matt Caswell <matt at openssl.org> wrote:
>>> 
>>> 
>>> 
>>>> On 28/07/18 03:49, Felipe Gasper wrote:
>>>> Hi all,
>>>> 
>>>>   Are there yet OIDs for Ed25519-signed X.509? I know about the drafts for the key format but am not aware of actual OIDs to identify the signature hash algorithm.
>>>> 
>>>>   Thank you!
>>>> 
>>> 
>>> See:
>>> 
>>> https://tools.ietf.org/html/draft-ietf-curdle-pkix-10
>>> 
>>> Matt
>>> 
>>> -- 
>>> openssl-users mailing list
>>> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>> 
> -- 
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users



More information about the openssl-users mailing list