# Ed25519 with Poly1305-Chacha20 Support in line with TLS 1.3 Standards **URL:** \ **Category:** Issuance Tech\ **Created:** [June 2, 2017, 9:54am UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393 "2017-06-02T09:54:11Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![Ilya\_indigo](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ilya_indigo/32/13947_2.png) [@Ilya\_indigo](https://community.letsencrypt.org/u/Ilya_indigo)\ **Post date:** [June 2, 2017, 9:54am UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/1 "2017-06-02T09:54:11Z")
Hello. You plan to sign the certificates ed25519 using the encryption method Poly1305/Chacha20? Modern browsers have long supported them. OpenSSL \>= 1.1 and LibreSSL \>= 2.5 too. Really miss the possibility to sign such a certificate. ---
**Author:** ![The\_Decryptor](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/the_decryptor/32/7488_2.png) [@The\_Decryptor](https://community.letsencrypt.org/u/The_Decryptor)\ **Post date:** [June 2, 2017, 11:02am UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/2 "2017-06-02T11:02:06Z")
Browsers don’t support Ed25519 as a certificate signing method (They do support the related x25519, but that’s independent of the certificate). ChaCha20 is just down to the server configuration, you should already be able to enable it if you’re running the right releases of OpenSSL or LibreSSL. ---
**Author:** ![Ilya\_indigo](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ilya_indigo/32/13947_2.png) [@Ilya\_indigo](https://community.letsencrypt.org/u/Ilya_indigo)\ **Post date:** [June 2, 2017, 11:30am UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/3 "2017-06-02T11:30:34Z")
Thanks for the reply. Could you please explain the differences between x25519 and ed25519 and curve25519 (KexAlgorithm from openSSH curve25519-sha256), it seemed to me that ed25519 and x25519 the same and browsers are ready to support not only rsa and ecdhe, but 25519, in any whatsoever form. Ideally, I want as openSSH, use a signed key ed25519 only. ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [June 2, 2017, 11:54am UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/4 "2017-06-02T11:54:19Z")
Hi @Ilya_indigo Are you looking for ciphers to use with SSH or TLS/SSL? OpenSSH and browsers support different ciphers. My understanding is while the ED25519 Curve has been implemented in multiple Crypto Libraries it is not yet an official standard [https://tools.ietf.org/html/rfc8032](https://tools.ietf.org/html/rfc8032) So yes a lot of protocols and libraries support it but most of these are proprietary or SSH based protocols [https://ianix.com/pub/ed25519-deployment.html#ed25519-soon](https://ianix.com/pub/ed25519-deployment.html#ed25519-soon) TLS 1.3 will add support for this curve however as it is still in draft it’s not likely that it will be a supported curve for some time > **[TLS 1.3 and the Future of Cryptographic Protocols | Synopsys](https://www.synopsys.com/blogs/software-security/tls-1-3/)** > > Review the issues with SSL and TLS and how the IETF is trying to address the fundamental problems in its upcoming TLS standard, TLS 1.3. > **[Transport Layer Security](https://en.wikipedia.org/wiki/Transport_Layer_Security)** > > Transport Layer Security (TLS) – and its predecessor, Secure Sockets Layer (SSL), which is now prohibited from use – are cryptographic protocols that provide communications security over a computer network. Several versions of the protocols find widespread use in applications such as web browsing, email, Internet faxing, instant messaging, and voice over IP (VoIP). Websites are able to use TLS to secure all communications between their servers and web browsers. The TLS protocol aims primarily to ... [https://tlswg.github.io/tls13-spec/](https://tlswg.github.io/tls13-spec/) Let’s Encrypt support the P Series of Curves (P128,P256,P384) Andrei ---
**Author:** ![ahaw021](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ahaw021/32/14882_2.png) [@ahaw021](https://community.letsencrypt.org/u/ahaw021)\ **Post date:** [June 2, 2017, 11:56am UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/5 "2017-06-02T11:56:13Z")
I have also changed this to issuance tech There is no need to request something that is not yet possible to do but it does make a good question about the support of the curve in general TLS/SSL landscape. Another instereting article: [https://blog.cloudflare.com/introducing-tls-1-3/](https://blog.cloudflare.com/introducing-tls-1-3/) Andrei ---
**Author:** ![Ilya\_indigo](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/ilya_indigo/32/13947_2.png) [@Ilya\_indigo](https://community.letsencrypt.org/u/Ilya_indigo)\ **Post date:** [June 2, 2017, 1:11pm UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/6 "2017-06-02T13:11:36Z")
Thank you very much! 🙂 ---
**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\ **Post date:** [June 4, 2017, 10:38pm UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/7 "2017-06-04T22:38:38Z")
For (publically trusted) certificates to use new algorithms and/or curves, the CA/B Forum Baseline Requirements would need to be updated too by the way. ---
**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\ **Post date:** [July 4, 2017, 10:38pm UTC](https://community.letsencrypt.org/t/ed25519-with-poly1305-chacha20-support-in-line-with-tls-1-3-standards/35393/8 "2017-07-04T22:38:39Z")
Closed on July 4, 2017, 10:38pm UTC This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.