Verifiable Credentials and Ed25519 Security Considerations

[Wind4Greg]

Hi I've been working on the W3C specification on using Ed25519 signatures for verifiable credentials EdDSA Cryptosuite v2022. I was thinking using some of your definitions from "Taming the Many EdDSAs", maybe the test vectors, and some of this work for the "Security section" of the specification.

Let me know if you are interested or would like to contribute. I've alerted some other open source Ed25519 signature libraries to your work and they have upgraded to perform the necessary checks for SUF, SBS. If we get your work referenced in a W3C spec I think it will push more libraries to improve.

Cheers Dr. Greg Bernstein

[kchalkias]

@Wind4Greg thank you for studying and recommending to the community some of the proposed EdDSA implementation best practices. Obviously you are free to use any test vectors or security definitions from the original paper and happy to review if/when required.

[Wind4Greg]

Great. What is the best way to contact you/co-authors? My email is [email protected].

Cheers Greg