3 ms·
A problem I have run into with x25519 and ed25519 is that in Nacl, both use different public key 'formats'. While they are the same curve, you cannot use an x25
by g45y45 8y ago
A problem I have run into with x25519 and ed25519 is that in Nacl, both use different public key 'formats'. While they are the same curve, you cannot use an x25519 for signing (ed25519 only) and you cannot use an ed25519 for encryption. PGP allows binding encryption and signing keys together in a profile. So far I have not been able to 'bind' an ed25519/x25519 key in a similar configuration.
- g45y45 8y agoMy point is that you need to roll your own cryptosystem, whereas PGP, for all its flaws, is a working, IND-CCA2 secure cryptosystem (provided you use the correct primitives). This whole blog is justification for removing PGP from Golang stdlib. I dont agree with Valsorda deprecating this.
- justincormack 8y agoIt is not recommended to use any keys for more than one purpose any more, this can allow attacks. So this is by design.
- g45y45 8y agoRight, but how does one bind the keys if they do not mutually support encryption or signing
- AgentME 8y agoPGP never uses the same key for both either. A PGP "key" is a signing key and a decryption key bundled together and then signed by the signing key.
- throwaway415415 8y agoIt's not by design. There are stuff like decaf, ristretto and qDSA which "fix" this
- tedunangst 8y agoHow hard is it to cat two keys together in a profile?
- g45y45 8y agobinding needs more than a simple cat. You want to wrap them together somehow