Skip to content

Home > Resources > papers > BDLSY11-Ed25519

High-Speed High-Security Signatures (Bernstein, Duif, Lange, Schwabe, Yang 2011)

Last modified: 2026-10-27
DOI: 10.1007/s13389-012-0027-1 ยท URL: https://eprint.iacr.org/2011/368

Summary

Introduces Ed25519, a Schnorr-style (EdDSA) signature scheme over a twisted Edwards curve birationally equivalent to Curve25519, designed for very fast signing and verification, deterministic nonces, and resistance to timing side channels. Ed25519 is now standardized (RFC 8032) and ubiquitous; in ZKP-based e-ID it is a candidate issuer signature whose in-circuit verification cost must be considered. (CHES 2011; journal version JCEN 2012.)