Thanks Bill, that’s what I thought. It’s somewhat unfortunate, as the high-level EVP APIs impose additional complexity (and actually measurable overhead over the raw ED25519_xxx APIs I mentioned
Using OpenSSL (which is already a dependency) for Ed25519 would allow me to eliminate a separate dependency on donna-ed25519, but I’m not sure I can justify the increased API complexity and the significant performance degradation (on the order of 50% for signing and 100% for verification).
Best regards,
Nik
Hey Nik,
> OpenSSL 1.1.1 includes three functions for “direct” Ed25519 signing and verification:
..
> Am I missing something here? Are these intentionally undocumented? Is there a reason why we don’t
> make them publicly available?
All crypto operations, including Ed25519, should use the higher level EVP
interface. It's an architecture design decision in OpenSSL.
https://www.openssl.org/docs/man1.1.1/man3/EVP_DigestSignInit.html
https://wiki.openssl.org/index.php/EVP_Signing_and_Verifying
Hope it helps,
BBB
