Ed25519 is defined over the 255 bit field GF(2^255-19) and thus has fixed size keys, so having key size recommendations for it is silly. (The underlying EdDSA c

Ed25519 is defined over the 255 bit field GF(2^255-19) and thus has fixed size keys, so having key size recommendations for it is silly. (The underlying EdDSA can be generalized to other sizes). 256-bit ECDSA is fine, it offers the same theoretical security level as Ed25519. Its main problem is that historically implementations were fragile (relying on high quality randomness for signing) and not resistant to side-channel attacks.