Ed448

E192670

Ed448 is a modern high-security elliptic-curve digital signature algorithm designed for strong cryptographic assurance and efficient performance.

All labels observed (2)

Label Occurrences
Ed448 canonical 7
Ed448 signature scheme 1

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf digital signature algorithm ⓘ
elliptic-curve signature scheme ⓘ
basedOn elliptic-curve cryptography ⓘ
belongsToCategory public-key cryptography ⓘ
comparedTo Ed25519 ⓘ
curveEquationType twisted Edwards curve ⓘ
curveFieldSize 448-bit prime field ⓘ
definedInSection RFC 8032, Section 5 ⓘ
linked to: RFC 8032
designedFor efficient performance ⓘ
high security ⓘ
designGoal constant-time implementations ⓘ
robustness against misuse of randomness ⓘ
simplicity of implementation ⓘ
encoding compressed point representation ⓘ
little-endian byte encoding for field elements ⓘ
fullName Edwards-curve Digital Signature Algorithm over Curve448 ⓘ
linked to: Curve448
hashFunctionUsed SHAKE256 ⓘ
introducedIn 2010s ⓘ
keyDerivation public key derived by scalar multiplication of base point ⓘ
keyGenerationMethod private key is uniformly random 57-byte string ⓘ
memberOfFamily EdDSA ⓘ
offersHigherSecurityThan Ed25519 ⓘ
privateKeySize 57 bytes ⓘ
property cofactor 4 ⓘ
collision-resistance depends on SHAKE256 ⓘ
designed to resist side-channel attacks with proper implementation ⓘ
large prime-order subgroup ⓘ
not vulnerable to small-subgroup attacks when implemented as specified ⓘ
publicKeySize 57 bytes ⓘ
recommendedFor long-term security applications ⓘ
requires constant-time big-integer arithmetic for side-channel resistance ⓘ
secure implementation of SHAKE256 ⓘ
securityLevel approximately 224-bit classical security ⓘ
signatureComputation uses nonce derived from private key and message via hash ⓘ
signatureSize 114 bytes ⓘ
standardizedBy IETF ⓘ
standardizedIn RFC 8032 ⓘ
suitableFor hardware implementations ⓘ
software implementations ⓘ
supports batch verification ⓘ
deterministic signatures ⓘ
prehash variant Ed448ph ⓘ
usedIn SSH (optional signature algorithm in some implementations) ⓘ
TLS 1.3 (optional signature algorithm) ⓘ
usesBasePoint fixed generator on Curve448 ⓘ
usesCoordinateSystem twisted Edwards coordinates ⓘ
usesCurve Curve448 ⓘ
verificationMethod checks group equation involving public key, signature, and message hash ⓘ

How these facts were elicited

Referenced by (8)

Full triples — surface form annotated when it differs from this entity's canonical label.

DNSSEC → supportsAlgorithm → Ed448 ⓘ
EdDSA → variant → Ed448 ⓘ
RFC 8554 → defines → Ed448 ⓘ
RFC 8032 → specifies → Ed448 ⓘ
Curve448 → supportsProtocol → Ed448 ⓘ
Curve448 → usedIn → Ed448 signature scheme ⓘ
linked to: Ed448