AWS KMS now supports Edwards-curve Digital Signature Algorithm (EdDSA)

AWS KMS EdDSA Support

AWS Key Management Service (KMS) now supports the Edwards-curve Digital Signature Algorithm (EdDSA). You can create elliptic curve asymmetric KMS key or data key pairs to sign and verify EdDSA signatures using the Edwards25519 curve (Ed25519). Ed25519 provides 128-bit security, faster signing performance, and small signature size (64 bytes) and public key sizes (32 bytes). This is ideal for IoT devices and blockchain applications.

This new capability is available in all AWS Regions, including AWS GovCloud (US) and China Regions.

What to do

• Create Ed25519 key pairs in AWS KMS for signing and verification.
• Use Ed25519 for applications requiring small key and signature sizes.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.