I have been using ed25519 with JWS and have found it to be very convenient. I use "Ed25519" as the alg and call the public and private parts of the key "vk" and "sk" (verifying and signing key) respectively. The compact key and signature size, fast signature verification, and very fast key generation and signing are attractive.
On Tue, Nov 12, 2013 at 8:07 AM, Dirkjan Ochtman <[email protected]> wrote: > Hi there, > > In Persona/BrowserID, we're currently using DSA signatures (using a > "DS128" value for "alg"). Would it be possible to get this into the > current JWS/JWA drafts? We're currently looking at upgrading our > formats to current JOSE draft, see here: > > https://github.com/djc/id-specs/blob/prod/browserid/json-formats.md > > Relatedly, I was wondering if there's been discussion on including any > non-NIST curves in JWA. With recent developments, it appears that the > NIST curves may be a little suspect. > > http://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance > http://cr.yp.to/talks/2013.05.31/slides-dan+tanja-20130531-4x3.pdf > > Instead, some of Bernstein et al.'s SafeCurves could be added: > > http://safecurves.cr.yp.to/ > > In particular, algorithms based on the 25519 curve already seems to be > in fairly widespread use. > > Cheers, > > Dirkjan > _______________________________________________ > jose mailing list > [email protected] > https://www.ietf.org/mailman/listinfo/jose _______________________________________________ jose mailing list [email protected] https://www.ietf.org/mailman/listinfo/jose
