Hello, This request should have been made to CAB Forum, but I could not find a feedback channel from CAB Forum to the public. And since ISRG is a member of the CAB Forum and Let's Encrypt is one of the major certificate brands on the Internet, I am posting my request here. According to the inform…

[image] wordlesswind: So why don't we use Ed25519 and Ed448 etc. for server certificates? The absence of EdDSA in TLS Ciphersuite surprised me, why exactly is all this? From the CA-Browser-Forum BR 1.8.4 6.1.5 Key sizes For RSA key pairs the CA SHALL: • Ensure that the modulus size, when …

The servercert-wg at cabforum has discussed like [Servercert-wg] [cabfpub] Interest in Ed25519 and/or Ed448? , and some of the certificate consumers like Mozilla are interested in supporting it, eg see 1325335 - (hacl-eddsa) Integrate HACL* EdDSA over Curve25519 There's not a huge advantage of the E…

[image] mcpherrinm: There's not a huge advantage of the Ed25519/Ed448 over the supported NIST curves, so there's not a lot of push. In contrast, P256 certs are a lot smaller than RSA2048 so there is some motivation to upgrade there. Well, depending on just how much one distrusts NIST and/or t…

You might want to check @Nummer378 response here [image] When choosing an elliptic-curve look for a safe curve Issuance Policy T… [image] When choosing an elliptic-curve look for a safe curve Also, while the SafeCurves website is a really great resource, it is ofte…

Still, I do agree with @wordlesswind 's request: I also would like to see support for EdDSA. The ED curves are much better than NIST's in many aspects. Sadly, the current state is that most implementations don't support EdDSA certificates: I run a test site myself ( ed25519-test.germancoding.com ) whe…

btw, s/mime BR which just passed by vote but in intelectual right review period, allows ed25519/ed448 key for certificate. S/MIME BR v1.0.0 for ballot by srdavidson · Pull Request #178 · cabforum/smime · GitHub

[image] petercooperjr: depending on just how much one distrusts NIST and/or the NSA regarding the process they used to make P-256, one might think that there could be vulnerabilities (or at least suboptimal choices) On the other hand the NSA improved the S-Boxes of LUCIFER in producing DES. …

[image] wordlesswind: This request should have been made to CAB Forum, but I could not find a feedback channel from CAB Forum to the public. You can officially participate in CA/B Forum without being a browser or CA by becoming an Interested Party , as an individual or organization. You can't …

EdDSA Certificates

Feature Requests

Bruce5051 December 1, 2022, 11:33pm 5

You might want to check @Nummer378 response here

Topic		Replies	Views
Can/should ISRG submit a proposal to support Ed25519/Ed448 certificates to CA/B Forum? ISRG/Organizational	13	5608	October 4, 2019
TLS 1.2 and TLS 1.3 need Curve25519 and Curve448 SSL certificates Issuance Policy	13	6854	June 27, 2023
Support Ed25519 and Ed448 Feature Requests	8	10064	January 15, 2019
Request For CertBot To Support The Signing of Ed25519 Certificates Feature Requests	11	7017	December 24, 2021
When choosing an elliptic-curve look for a safe curve Issuance Policy	3	21257	October 3, 2021

EdDSA Certificates

Related topics