> Shouldn't the "message" being signed by EdDSA (or others like RSA) be a hash of the real data? It could be, and that's what I currently recommend. But then

> Shouldn't the "message" being signed by EdDSA (or others like RSA) be a hash of the real data? It could be, and that's what I currently recommend. But then isn't there a problem with collision attacks? Or does one still has to perform a pre-image attack on the hashes of previous messages?