Module ed25519

Implemented according to IETF RFC 8032.

Functions

ed25519_derive_pub_key

Returns your public key given your priv_key.

ed25519_sign

Creates an Ed25519 digital signature, given a priv_key and message. This signature can be verified by anyone, given your public key, the the original message, and the signature.

ed25519_verify

Verifies an Ed25519 digital signature. This implementation is not constant-time, as it does not involve secret data.

ed25519ctx_sign

Creates an Ed25519ctx digital signature, given a priv_key, a message, and a context. The context is a byte slice of less than 256 bytes that describes the protocol or application the signature is for. The context should not be empty, nor should it depend on the content of the message.

ed25519ctx_verify

Verifies an Ed25519ctx digital signature. This implementation is not constant-time, as it does not involve secret data.

ed25519ph_sign

Creates an Ed25519ph digital signature, given a priv_key, a message, and a context. Unlike Ed25519ctx, the context here is optional, and should be left empty in the default case. Ed25519ph signs a SHA-512 hash of the input message, and is therefore vulnerable if weaknesses in SHA-512 are discovered. For this reason, it’s not recommended to use this, unless for some reason, Ed25519 is not suitable for your use-case.

ed25519ph_verify

Verifies an Ed25519ph digital signature. This implementation is not constant-time, as it does not involve secret data.