Re: Support for ECDSA & ed25519 digital signatures in pgcrypto?

From: Bruce Momjian <bruce(at)momjian(dot)us>
To: Nilesh Trivedi <nilesh(dot)tr(at)gmail(dot)com>
Cc: pgsql-hackers(at)lists(dot)postgresql(dot)org
Subject: Re: Support for ECDSA & ed25519 digital signatures in pgcrypto?
Date: 2018-03-01 02:43:44
Views: Raw Message | Whole Thread | Download mbox | Resend email
Lists: pgsql-hackers

On Sun, Feb 4, 2018 at 04:38:24PM +0530, Nilesh Trivedi wrote:
> I recently had to build ed25519 digital signature validation in PostgreSQL.
> Since pgcrypto doesn't
> support these methods, I had to look into PL/Python and PL/v8 based
> implementations. The
> experience turned out to be very poor (documented here:
> /nileshtrivedi
> /7cd622d4d521986593bff81bfa1e5893
> I think OpenSSL already supports these encryption methods and it would be great
> to have them
> supported within pgcrypto - especially with the advent of distributed systems
> like IPFS, public
> blockchains like BitCoin, Ethereum. Elliptic curve cryptography has some major
> advantages over
> RSA: for both security and usability. Some are listed here: https://
> Is somebody working on this? I'm not a C programmer but if needed, I can look
> into implementing
> this.

I agree there is going to be a lot more focus on ECDSA because elliptic
curve cryptography is much more efficient for large key sizes, see:

and RSA can't support elliptic curve. Chrome accessing
is already using ECDSA:

Bruce Momjian <bruce(at)momjian(dot)us>

+ As you are, so once was I. As I am, so you will be. +
+ Ancient Roman grave inscription +

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message David Gould 2018-03-01 03:23:37 Re: [patch] BUG #15005: ANALYZE can make pg_class.reltuples inaccurate.
Previous Message Peter Eisentraut 2018-03-01 02:34:06 faster testing with symlink installs