Truncated EdDSA/ECDSA Signatures

ePrint Report: Truncated EdDSA/ECDSA Signatures

Thomas Pornin

This note presents some techniques to slightly reduce the size of EdDSA and ECDSA signatures without lowering their security or breaking compatibility with existing signers, at the cost of an increase in signature verification time; verifying a 64-byte Ed25519 signature truncated to 60 bytes has an average cost of 4.1 million cycles on 64-bit x86 (i.e. about 35 times the cost of verifying a normal, untruncated signature).

ecdsa eprint report signatures