Support Ed25519 and Ed448

Feature Requests
7

As DarkSpirit on GitHub points out, the IETF has standardized the OIDs for Ed25519 et al. Additional stuff that needs to happen before Let’s Encrypt can sign Ed25519 end-entity certificates:

  • Browsers need to implement it.
  • CA/Browser Forum needs to pass a ballot allowing its use.

Note that we won’t be able to generate Ed25519 intermediate certificates until / unless our HSM vendor releases firmware supporting them.