Skip to content

Ed25519 and Ed448 are supported under FIPS#14616

Merged
alex merged 7 commits intopyca:mainfrom
WillChilds-Klein:main
Apr 8, 2026
Merged

Ed25519 and Ed448 are supported under FIPS#14616
alex merged 7 commits intopyca:mainfrom
WillChilds-Klein:main

Conversation

@WillChilds-Klein
Copy link
Copy Markdown
Contributor

Notes

Ed25519 and Ed448 signature schemes (both EdDSA) are FIPS approved. See section 7 of FIPS 186-5.

Testing

  • local testing on MacOS
  • CI

Ed25519 and Ed448 signature schemes (both EdDSA) are FIPS approved. See
section 7 of [FIPS 186-5][1].

[1]: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf
@WillChilds-Klein WillChilds-Klein marked this pull request as ready for review April 8, 2026 15:40
@reaperhulk
Copy link
Copy Markdown
Member

When 186-5 was published unfortunately no FIPS providers had actually gotten validated with it so it wasn't usable. Looks like that's no longer true, but we do have a coverage issue in test_ssh.py because there is no longer a build in our matrix that doesn't support EdDSA. If we're finally at the point where EdDSA is universal we should just remove the skip checks on line 177-178 and 71-72.

@WillChilds-Klein
Copy link
Copy Markdown
Contributor Author

@reaperhulk -- thanks. I've removed relevant checks from test_ssh.py and all other relevant test files. coverage looks like it's back up to 100%.

@alex alex enabled auto-merge (squash) April 8, 2026 22:20
@alex alex merged commit cdbdae2 into pyca:main Apr 8, 2026
68 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants