# Annex F Worked examples for both parameter sets

Annex F gains worked examples for the two EdDSA sets, Ed25519 and Ed448, covering key generation, signing and verification. The examples are the cheapest way to prove an implementation is on the specified path, and they are the evidence a reviewer will ask for.

## What it asks

Run the worked examples in continuous integration, for both sets, and keep the output. Where an example fails, treat it as a defect in the implementation before treating it as a defect in the example, and record which one it was.

## What the amendment does

Adds EdDSA worked examples to Annex F.

## Who it binds

The test owner and the release manager.

## Evidence an auditor samples

- The test that runs each worked example, with the expected values (test suite)
- The last run output, dated, for both sets (release record)
- The defect record for any example that failed and why (issue tracker)

## The test you can run

Run the examples against a fresh build. A pass on one set and a skip on the other is a finding, not a partial pass.

## Common failures

- One set is tested and the other is assumed to work.
- The example is run once by hand and never in the pipeline.

## How to close it

Worked examples are the highest value test per line of code in a cryptography change. Put them in the pipeline for both sets, and make the release record quote the run rather than the intention.

## Source

ISO/IEC 14888-3:2018/FDAM 1:2026(en), draft, Annex F. Read on 21 October 2026. Our wording, not the instrument's.
https://www.iso.org/standard/89517.html

Not legal advice; does not certify.