Home / Answers / What evidence should we keep for the EdDSA amendment?
What evidence does an auditor ask for under the 14888-3 amendment?
Five artefacts: a mechanism inventory with the arithmetic setting, parameter set and hash; the EdDSA decision with an owner; a verifier test log with the four rejection cases; a hash strength table; and an object identifier inventory. Each needs a date and a named person.
What is the first artefact?
The mechanism inventory. Without it, no other item can be scoped, because nobody knows which systems the amendment reaches.
What is the most commonly missing one?
The verifier rejection log. Teams test that a valid signature verifies, and rarely test that a malformed one is rejected.
Does the kit carry the evidence list?
Yes. All 90 evidence artefacts are in the register, with an empty evidence pointer column for your own file.
The clause behind the answer
This answer is drawn from 33 recorded clauses of ISO/IEC 14888-3:2018/Amd 1, at stage 60.00 on 16 October 2026. The record states each one in our words and links the ISO record. The free check turns your position into a dated action list.
Run the free check Open the record
What is the first artefact?
The mechanism inventory. Without it, no other item can be scoped, because nobody knows which systems the amendment reaches.
What is the most commonly missing one?
The verifier rejection log. Teams test that a valid signature verifies, and rarely test that a malformed one is rejected.
Does the kit carry the evidence list?
Yes. All 90 evidence artefacts are in the register, with an empty evidence pointer column for your own file.
Not legal advice; does not certify. Last updated: 2026-10-21.