Ed25519

[blizzardplus]

Any plans to include Ed25519 in addition to Curve25519?

[ciarmcom]

ARM Internal Ref: IOTSSL-594

[mpg]

It's not faster. Actualy Ed25519 and Curve25519 are two ways to look at the same curve, and the main difference is, Ed25519 is more suited to signing, while Curve25519 is more suited for Diffie-Hellman.

[carlescufi]

+1 on this one, would be great to have Ed25519/EdDSA support.

[nuket]

+1, would be nice to have alternatives to the NIST curves.

[H3ik0]

+1 Please do for hiawatha-webserver, and also ChaCha20-Poly1305 for better mobile performance

[MalteJ]

+1

[willderness]

+1 would be great to see Ed25519 as part of mbedTLS

[MalteJ]

I'd love to see support for TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 using Ed25519

[samrg472]

+1

[utzig]

+1

[d3zd3z]

+1 This indeed would be useful, not only for TLS, but for MCUboot and in general for signature verification.

[concatime]

Please, stop adding +1, it's not helpful at all. There's a button for that, or a pull request if you're able.

[xicilion]

So, is there any plan now?

[James-E-A]

Is there anything worth stealing in dunkelstern/mbedtls or dunkelstern/mbedtls-esp8266?

t. another Hiawatha user diligently lurking all the req'd software's progress to get (even non-CA-signed) Ed25519/X25519 certs running

[532910]

Is any update there, through 4 years?
ed25519/ed448 are modern and widely supported schemes, it's strange to see the lack of support in mbedtls.

[gilles-peskine-arm]

An external contributor has kindly volunteered to contribute an implementation of EdDSA. Unfortunately review bandwidth is a bottleneck, so it'll take us a few months to integrate the feature. You can track our progress through the milestone field of the pull requests (of which there is currently one of a planned 4).

Given that all the recent discussion on the topic is happening on #2452, I think this issue is no longer useful, so I'm closing it.