home.social

#eddsa — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #eddsa, aggregated by home.social.

  1. thought it might be nice to sign #sphinx releases with #minisign and #ssh #eddsa keys, straight outta sphinx. minisign #privkeys are okish (they do need 40 B of entropy, 8 extra for a "keyid"). but did you know, that in ssh the public key is stored 3x in the ed25519 private #key? one time i can understand (could be 0 though), but 3 times? what have they been drinking? #fileformats

  2. thought it might be nice to sign #sphinx releases with #minisign and #ssh #eddsa keys, straight outta sphinx. minisign #privkeys are okish (they do need 40 B of entropy, 8 extra for a "keyid"). but did you know, that in ssh the public key is stored 3x in the ed25519 private #key? one time i can understand (could be 0 though), but 3 times? what have they been drinking? #fileformats

  3. thought it might be nice to sign #sphinx releases with #minisign and #ssh #eddsa keys, straight outta sphinx. minisign #privkeys are okish (they do need 40 B of entropy, 8 extra for a "keyid"). but did you know, that in ssh the public key is stored 3x in the ed25519 private #key? one time i can understand (could be 0 though), but 3 times? what have they been drinking? #fileformats

  4. do you know any service where you can use #eddsa keys with #webauthn online? do we still have to do rsa and ecdsa in 2024?

    please boost maybe someone knows the answer.

    #crypto #passkeys

  5. RFC 8410: Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure

    Ce #RFC spécifie l'utilisation des #courbesElliptiques #Curve25519 et Curve448 dans PKIX, c'est-à-dire dans les certificats utilisés notamment pour TLS. Il réserve des identifiants pour les algorithmes, comme Ed25519.

    bortzmeyer.org/8410.html

    #EdDSA #ECDH

  6. t-cose ("tea cosy", hence the teapots on the slides) is a C implementation of #COSE (signing #CBOR files). Many new features such as multiple signers, #edDSA, etc.

  7. @xtexChooser There is an article on djb how to construct #EdDSA. It may help you understand why it's that shape.
    blog.cr.yp.to/20140323-ecdsa.h

  8. Network Security Services (#NSS) 3.99 was tagged and released on
    15th March 2024.

    Among others,

    - Bug 1325335 - Adding #EdDSA implementation.

    bugzilla.mozilla.org/show_bug.

    Big thanks to Anna Weine (nkulatova) for working on this!

  9. Thank you @Kovah for your detailed article. This shows what the current #SSH keys #security is. Now ALL of us just have to realize and implement this:

    «Why and How: Switch from #RSA to #EdDSA / #ED25519 SSH keys»

    🔏 blog.kovah.de/en/2019/switchin

  10. Farcaster Records Surge in Daily Users with Frames Launch - The number of daily active users on the decentralized social protocol Farcaster surged to... - cryptonews.com/news/farcaster- #farcaster #definews #warpcast #eddsa

  11. @[email protected] @letsencrypt To clarify, there are some 3rd party apps that are outdated or non-FOSS SMTP/IMAP clients, but nothing that really handles @GnuPG directly on either #iOS or #iPadOS. On the other hand, S/MIME is widely supported but less safe since it's not stored on a tamper-resistant and removable smart card, but at least it would integrate with Apple Mail and others.

    It's the fact that getting an S/MIME certificate that is signed by a widely-used certificate authority is more costly than it's worth. I'd really prefer to use #GnuPG with either attestation credentials or an #EDDSA signing key on an external token like a #Yubikey

    I can't be the only person who's wondered about this, but I can't find a lot of how-tos about this particular use case. Whether S/MIME or PGP/MIME, how are you supposed to integrate the on-token certificate? If that's a no-op because of Apple's walled garden, then where are people getting their S/MIME-specific certificates without having to ask recipients to trust self-signed keys?

  12. Y qué loco, ahora hablando sobre #EdDSA, un algoritmo que recomendé hace poco para la generación de claves asimétricas en SSH.

    No lo vieron? 👇 👇 👇
    youtu.be/qgtuWWd35mY

  13. Having issues with GitHub atm, account flagged, but I jotted down the commands to create a secure #EdDSA #PGP key. It requires #Ed25519 for cert, sign, and auth keys and #Curve25519 for encryption.

    Strictly speaking you don’t require the auth key for your use case, it’s mostly useful only for SSH.

    But this is the correct way to create a secure EdDSA key.

    It’s also of note that it is the default setup for latest Kleopatra.

    Here’s the link, feel free to drop it in the thread for further discussion:

    https://telegra.ph/Best-practice-for-generating-a-secure-PGP-key-EdDSA-11-25