On 12/2/15, 9:29 AM, "Simon Josefsson" <si...@josefsson.org> wrote:
>Hi. I have prepared a writeup on how to add the EdDSA Ed25519/Ed448 >public-key digital signature algorithm to XMLDSIG. > >https://mailarchive.ietf.org/arch/msg/curdle/Ylertitv43TdDrcm4ufh2LxdBjM > >Are you interested in implementing this? If so, your feedback on the >description is appreciated. If there is interest among XMLDSIG >implementers, I would turn this into a proper IETF draft. Hi Simon, Speaking as the C++ maintainer, it's pretty much dependent on OpenSSL support (and my ability to figure out how to make use of it without screwing it up, given that OpenSSL is largely undocumented). Speaking as a consumer of the Java code, does Java actually support this algorithm? I didn't see any sign it did. I don't think there's any actual crypto in the current library, it's JCE-reliant. Colm can correct me. As an aside in reading your draft, you might consider just specifying that public keys be carried in the 1.1 DEREncodedKeyValue element since you're encoding it anyway. It's generally easier to deal with one encoded format (the SubjectPublicKeyInfo form) than multiple. -- Scott
