ZeroNet icon indicating copy to clipboard operation
ZeroNet copied to clipboard

Switch to Ed25519 for keys

Open yanmaani opened this issue 4 years ago • 2 comments

Currently, ZeroNet uses ECDSA for its signatures. It would probably be a good idea to switch to Ed25519 long-term, for the following reasons:

  • Ed25519 public keys are slightly shorter than ECDSA keys (33 vs 32 bytes, no 64-byte "uncompressed" public key format)
  • Ed25519 is slightly easier to implement securely, because side channel attacks are harder to pull off, and because there is no need for a secure RNG to make signatures
  • Ed25519 is what BitTorrent uses, so it would be beneficial for interoperability if that ever happens
  • Using ECDSA in the Base58 encoding encourages unsafe kinds of key reuse

In principle, this is not an urgent change, and it would be breaking, so it's probably reasonable to do this at the same time as #2781.

yanmaani avatar Oct 25 '21 18:10 yanmaani

#2053 <- relevant?

yanmaani avatar Oct 25 '21 18:10 yanmaani

@yanmaani

Using ECDSA in the Base58 encoding encourages unsafe kinds of key reuse

Are you hallucinating? Do you even understand what key reuse is?

Reusing your keys as many times as you want is not insecure.

We don't care about the orgasm you had when Blockstream Inc inserted taproot into your anus.

Stop acting as if you have any idea what you're talking about.

ghost avatar Jan 02 '23 03:01 ghost