EdDSA - Revision history

Tom: /* References */

2023-12-24T01:48:47Z

‎References

Tom at 01:37, 24 December 2023

2023-12-24T01:37:05Z

Tom at 01:31, 24 December 2023

2023-12-24T01:31:05Z

Tom: Created page with "To get a certificate signed with EdDSA, you can use the Edwards-curve Digital Signature Algorithm (EdDSA) scheme1. This algorithm is designed to be faster than existing digita..."

2023-12-24T01:23:14Z

Created page with "To get a certificate signed with EdDSA, you can use the Edwards-curve Digital Signature Algorithm (EdDSA) scheme1. This algorithm is designed to be faster than existing digita..."

New page

To get a certificate signed with EdDSA, you can use the Edwards-curve Digital Signature Algorithm (EdDSA) scheme1. This algorithm is designed to be faster than existing digital signature schemes without sacrificing security. You can create a Certificate Authority (CA) using EdDSA keys both using the EJBCA Admin UI and the CLI1.

When generating a CA in EJBCA, up to three keys and certificates are generated: A CA signing keypair and certificate, an encryption keypair, used for encrypting key recovery information, and an OCSP signer keypair and certificate1. When using EdDSA keys, the CA signing keypair and the OCSP signer keypair will be the EdDSA keytype you select when creating the CA. The CA signing and OCSP signing certificate will be signed using your selected signature algorithm. The encryption keypair will always be RSA, using 1024 or 2048 bit key length1.

Here is a sample CSR generation command for your clients using OpenSSL1:
openssl genpkey -algorithm ED25519 -out ed25519.key.pem
openssl req -new -key ed25519.key.pem -out ed25519.csr.pem
openssl req -in ed25519.csr.pem -text

==References==

[[Category: Cryptography]]

← Older revision		Revision as of 01:48, 24 December 2023
Line 15:		Line 15:

	==References==		==References==
		+	* see Edwards-Curve Digital Signature Algorithm (EdDSA) RFC 8032

	[[Category: Cryptography]]		[[Category: Cryptography]]

@@ Line 5: / Line 5: @@
 To get a certificate signed with EdDSA, you can use the Edwards-curve Digital Signature Algorithm (EdDSA) scheme. This algorithm is designed to be faster than existing digital signature schemes without sacrificing security. You can create a Certificate Authority (CA) using EdDSA keys both using the EJBCA Admin UI and the CLI1.<ref>Keyfactor ''EdDSA Keys and Signatures (retrieved 2021-12-23) https://doc.primekey.com/ejbca/ejbca-operations/ejbca-ca-concept-guide/certificate-authority-overview/eddsa-keys-and-signatures</erf>
-When generating a CA in EJBCA, up to three keys and certificates are generated: A CA signing keypair and certificate, an encryption keypair, used for encrypting key recovery information, and an OCSP signer keypair and certificate1. When using EdDSA keys, the CA signing keypair and the OCSP signer keypair will be the EdDSA keytype you select when creating the CA. The CA signing and OCSP signing certificate will be signed using your selected signature algorithm. The encryption keypair will always be RSA, using 1024 or 2048 bit key length1.
+When generating a CA in EJBCA, up to three keys and certificates are generated: A CA signing key pair and certificate, an encryption key-pair, used for encrypting key recovery information, and an OCSP signer key-pair and certificate1. When using EdDSA keys, the CA signing keypair and the OCSP signer key-pair will be the EdDSA keytype you select when creating the CA. The CA signing and OCSP signing certificate will be signed using your selected signature algorithm. The encryption keypad will be RSA in the near term, using 1024 or 2048 bit key length.
 Here is a sample CSR generation command for your clients using OpenSSL1:

← Older revision		Revision as of 01:31, 24 December 2023
Line 1:		Line 1:
−	To get a certificate signed with EdDSA, you can use the Edwards-curve Digital Signature Algorithm (EdDSA) ~~scheme1~~. This algorithm is designed to be faster than existing digital signature schemes without sacrificing security. You can create a Certificate Authority (CA) using EdDSA keys both using the EJBCA Admin UI and the CLI1.	+	==Full Title==
		+	Edwards-curve Digital Signature Algorithm (EdDSA) scheme
		+
		+	==Context==
		+	To get a certificate signed with EdDSA, you can use the Edwards-curve Digital Signature Algorithm (EdDSA) scheme. This algorithm is designed to be faster than existing digital signature schemes without sacrificing security. You can create a Certificate Authority (CA) using EdDSA keys both using the EJBCA Admin UI and the CLI1.<ref>Keyfactor ''EdDSA Keys and Signatures (retrieved 2021-12-23) https://doc.primekey.com/ejbca/ejbca-operations/ejbca-ca-concept-guide/certificate-authority-overview/eddsa-keys-and-signatures</erf>

	When generating a CA in EJBCA, up to three keys and certificates are generated: A CA signing keypair and certificate, an encryption keypair, used for encrypting key recovery information, and an OCSP signer keypair and certificate1. When using EdDSA keys, the CA signing keypair and the OCSP signer keypair will be the EdDSA keytype you select when creating the CA. The CA signing and OCSP signing certificate will be signed using your selected signature algorithm. The encryption keypair will always be RSA, using 1024 or 2048 bit key length1.		When generating a CA in EJBCA, up to three keys and certificates are generated: A CA signing keypair and certificate, an encryption keypair, used for encrypting key recovery information, and an OCSP signer keypair and certificate1. When using EdDSA keys, the CA signing keypair and the OCSP signer keypair will be the EdDSA keytype you select when creating the CA. The CA signing and OCSP signing certificate will be signed using your selected signature algorithm. The encryption keypair will always be RSA, using 1024 or 2048 bit key length1.