Home / Answers / Does the amendment add EdDSA?
Does ISO/IEC 14888-3 add EdDSA, Ed25519 and Ed448?
Yes. The amendment adds EdDSA as a certificate-based mechanism on twisted Edwards curves, with Ed25519 and Ed448 parameter sets, a key generation clause, a signing clause, a verification clause that requires malformed encodings to be rejected, and object identifiers for both curves.
Which parameter sets are specified?
Ed25519 and Ed448, with the field, encoding length, cofactor, hash functions, curve coefficients and base points in one table.
Is EdDSA certificate-based?
Yes. The amendment places it in Clause 6 with the certificate-based mechanisms and leaves Clause 7, the identity-based mechanisms, untouched.
What must a verifier do?
Decode the key, the witness and the second part, check the range, and reject before running the group equation if any decode fails.
The clause behind the answer
This answer is drawn from 33 recorded clauses of ISO/IEC 14888-3:2018/Amd 1, at stage 60.00 on 16 October 2026. The record states each one in our words and links the ISO record. The free check turns your position into a dated action list.
Run the free check Open the record
Which parameter sets are specified?
Ed25519 and Ed448, with the field, encoding length, cofactor, hash functions, curve coefficients and base points in one table.
Is EdDSA certificate-based?
Yes. The amendment places it in Clause 6 with the certificate-based mechanisms and leaves Clause 7, the identity-based mechanisms, untouched.
What must a verifier do?
Decode the key, the witness and the second part, check the range, and reject before running the group equation if any decode fails.
Not legal advice; does not certify. Last updated: 2026-10-21.