Home / The record / EdDSA, the new clause

The amendment inserts the new clause after the last verification subclause of the SM2 mechanism. The position is not cosmetic: it keeps the certificate-based mechanisms in Clause 6 and leaves the identity-based mechanisms in Clause 7 untouched, which tells a reader that EdDSA is certificate-based.

What it asks

Place EdDSA in the certificate-based part of your own documentation and inventory, and confirm that an identity-based deployment is out of scope for this amendment. A reader who files EdDSA with the identity-based mechanisms will look for the wrong key management.

What the amendment does

Inserts the new clause after 6.12.5.7. So this is new text rather than a change to wording.

Who it binds

The author of the internal standard and the inventory owner.

Evidence an auditor samples

• The internal standard structure, with EdDSA among the certificate-based mechanisms (cryptography standard)
• The inventory view that separates certificate-based and identity-based rows (configuration management database)
• The scope note that records the identity-based mechanisms as untouched (design note)

The test you can run

Ask where EdDSA sits in the internal standard. If it is filed with the identity-based mechanisms, the key management section above it will be wrong.

Common failures

• The mechanism is filed by product rather than by the clause structure.
• The scope note claims the whole standard changed.

How to close it

Structure is a claim about scope. File the new mechanism where the clause puts it, and write one line that says the identity-based mechanisms were not amended, so that a reader knows what not to re-open. Start with the internal standard structure, with EdDSA among the certificate-based mechanisms and let the row close when it exists with a date and a named holder.

Where it sits against the base standard

The base standard does not carry this text. The amendment adds it, so an estate working from the 2018 edition alone will not find it. The citation has to name the amendment, and the record for 6.12.5.7 is the only place a reader can see it.