[dns-operations] EdDSA status ?

Paul Hoffman phoffman at proper.com
Fri Jun 1 16:06:58 UTC 2018


On 1 Jun 2018, at 8:40, Viktor Dukhovni wrote:

> Therefore, while it should become easier to start signing
> with Ed25519/Ed448 soon at early adopter sites, it only
> makes sense to include some Ed25519 or Ed448 KSKs along
> side more established algorithms 8(RSA-SHA256) or
> 13(ECDSA-P256).

Just so I can understand: why is anyone even interested in using EdDSA 
instead of ECDSA in DNSSEC unless you are doing online (live) signing?

--Paul Hoffman



More information about the dns-operations mailing list