HelloZeroNet / HelloZeroNet/ZeroNet

Switch to Ed25519 for keys

Open
#2,784 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
18.8k
Forks
2.3k
PR merge metrics
No merged PRs in 30d

Description

Currently, ZeroNet uses ECDSA for its signatures. It would probably be a good idea to switch to Ed25519 long-term, for the following reasons:
- Ed25519 public keys are slightly shorter than ECDSA keys (33 vs 32 bytes, no 64-byte "uncompressed" public key format)
- Ed25519 is slightly easier to implement securely, because side channel attacks are harder to pull off, and because there is no need for a secure RNG to make signatures
- Ed25519 is what BitTorrent uses, so it would be beneficial for interoperability if that ever happens
- Using ECDSA in the Base58 encoding encourages unsafe kinds of key reuse

In principle, this is not an urgent change, and it would be breaking, so it's probably reasonable to do this at the same time as #2781.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.