casey / filepack

#⃣ file verification utility
https://filepack.com/
Creative Commons Zero v1.0 Universal
37 stars 3 forks source link

Open question: Should we use BLAKE3 instead of SHA-512 for signature message digests? #50

Open casey opened 1 month ago

casey commented 1 month ago

ed25519 uses SHA-512 in its signature algorithm. Since we already use BLAKE3 to hash files, we could use BLAKE3 as the digest in our signature algorithm instead. ed25519 requires a 512 bit digest, and BLAKE3 is 256 bits by default, but BLAKE3 is an XOF, so it's trivial to produce 512 bits of output.

Pros:

Cons:

The con is a major one. We would lose compatibility with other ed25519 implementations, like libraries and hardware devices. This is probably not worth doing, but I wanted to create this issue to allow for some discussion.