curve25519 for authentication?



Would it be reasonable (meaning secure) to use curve25519 for use in an
authentication (certificates, signing, etc.) as a replacement for RSA,
or should curve25519 only be used for Diffie-Hellman key agreement?

Thanks,
-Andrew

.



Relevant Pages

  • Re: RSA encryption - practical question
    ... I can combine it with some RSA ... signing to add extra work to the cracker, ... The program doesn't _need_ the RSA hashing to decrypt the file, ...
    (comp.security.misc)
  • Re: RSA Signing Security?
    ... is provably related to that of the underlying RSA problem. ... signature scheme, or a public-key encryption scheme or anything else ... the PSS scheme does. ... RSA for signing messages which are just plain bad, ...
    (sci.crypt)
  • Re: CAPICOM VB Newbie seeks help
    ... Signing operations use the certificates private key, ... AD store should have privates keys associated with them so CAPI can not ...
    (microsoft.public.platformsdk.security)
  • Re: Encryption Export Legality
    ... >>I will take the Gnu GP algorithm and replace RSA with blowfish. ... >>(Blowfish toutes itself as a drop in replacement for RSA anyway.) ...
    (sci.crypt)
  • Re: rsa implementation question
    ... > i am using RSa for signing documents and hence decrypting and then ... Always hash and pad, for any size message. ... Next you need a padding scheme that formats the message into a ... block suitable for the RSA private key operation. ...
    (comp.lang.python)