Subject: [Curdle] Algorithm identifiers in draft-ietf-curdle-pkix-eddsa-00

From: Russ Housley <[email-masked]>
Date: Thu, 5 May 2016 15:33:54 -0400

draft-ietf-curdle-pkix-eddsa-00 says:

   The id-EdDSASignature OID is used for identifying EdDSA signatures.

          id-EdDSASignature OBJECT IDENTIFIER ::= { 1 3 101 101 }

   The id-EdDSASignature OID is intended to be used in the algorithm
   field of a value of type AlgorithmIdentifier.  The parameters field
   MUST be absent.  To further clarify how to encode the parameters
   field, due to historical misunderstandings in this area, it MUST NOT
   have an ASN.1 type NULL.

Historically, we have assigned OIDs for a combination of signature algorithm and one-way hash function.

The hash function used with EdDSA depends on the curve that is being used. Curve25519 uses SHA-512, and Curve448 uses SHAKE256.

Wouldn’t it be better to have two OIDs here?

Russ