[dns-operations] EdDSA status ?

Viktor Dukhovni ietf-dane at dukhovni.org
Fri Jun 1 17:38:53 UTC 2018



> On Jun 1, 2018, at 1:27 PM, Paul Hoffman <phoffman at proper.com> wrote:
> 
> What does "consistent" mean here? All ECDSA signatures are the same length and have the same parameters.

Typically, ECDSA is not deterministic, it uses a random nonce.  Using the same nonce for two different messages compromises the key.  Deriving the nonce from the message in a collision-resistant manner can yield deterministic ECDSA signatures:

  https://tools.ietf.org/html/rfc6979?

-- 
	Viktor.





More information about the dns-operations mailing list