EdDSA for more curves

Paper 2015/677

EdDSA for more curves

Daniel J. Bernstein, Simon Josefsson, Tanja Lange, Peter Schwabe, and Bo-Yin Yang

Abstract

The original specification of EdDSA was suitable only for finite fields Fq with q mod 4 = 1. The main purpose of this document is to extend EdDSA to allow finite fields Fq with any odd q. This document also extends EdDSA to support prehashing, i.e., signing the hash of a message.

@misc{cryptoeprint:2015/677,
      author = {Daniel J.  Bernstein and Simon Josefsson and Tanja Lange and Peter Schwabe and Bo-Yin Yang},
      title = {{EdDSA} for more curves},
      howpublished = {Cryptology {ePrint} Archive, Paper 2015/677},
      year = {2015},
      url = {https://eprint.iacr.org/2015/677}
}