[gnutls-devel] GnuTLS | RFC8463 and signing hashes with ED25519 (#613)

[Development of GNU's TLS library]

> The answer https://www.ietf.org/mail-archive/web/dcrup/current/msg00502.html contains: “if the spec says there's a pure version that doesn't hash its input, the libraries would implement it”.

GnuTLS implements the standardized version of EdDSA, which is the pure version as defined in [RFC8410](https://tools.ietf.org/html/rfc8410). The pure version can only hash data, and cannot sign an existing hash.

The version which can sign arbitrary hashes is called pre-hashed-EdDSA and has not been standardized (at least not in the RFC above).

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/613#note_117128641
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20181114/2373f7bb/attachment.html>