Ed25519 Signature Generator & Verifier

Ed25519 Signature Generator & Verifier: Computes Ed25519 Edwards-curve digital signature (RFC 8032) in browser memory.

Ed25519 Sign Verify · Client runtimeSandboxed
Formatted results will render here in real time.

About this ed25519 signature generator & verifier

Computes Ed25519 Edwards-curve digital signature (RFC 8032) in browser memory Runs entirely in-memory using Web Crypto primitives to keep sensitive tokens, certificates, and cryptographic keys secure from third-party interception.

Encoding & cryptographic principles

Performs symmetric encryption and asymmetric public-key operations adhering to NIST FIPS 197 (AES), RFC 7539 (ChaCha20-Poly1305), RFC 8032 (Ed25519 Digital Signatures), and PKCS#1 / RFC 3447 (RSA). AES-GCM provides authenticated symmetric encryption using 128-bit or 256-bit keys and 96-bit initialization vectors (IVs) to ensure confidentiality and cryptographic authentication. Key derivation employs PBKDF2 (RFC 2898) with HMAC-SHA256 and configurable salt iterations to thwart brute-force dictionary attacks.

Worked verification example

Scenario: Verify a published Ed25519 signature over a fixed UTF-8 test message.

Sample input:

{"operation":"verify","message":"CZOA 2026 Test Message","publicKeyHex":"b37e7748fd6369bb718c72915f07b25831690fc078b5d2edae4f53410482de62","signatureHex":"660945d80dd0cca9b086098de455fdbe1df3e619c9cbba45b2acf6f172ea4540df83d58637f049d8753a101ce411f22b515c1fdbdea468687f0312a26c990e09"}

Processing: Verifies the 64-byte signature against the exact message and 32-byte public key; a valid signature does not establish signer identity.

Illustrative output:

{ "algorithm": "Ed25519", "operation": "verify", "valid": true }

Security parameters & input constraints

The signing result exposes the private key, so do not treat the text area as secure storage. Verification proves that this signature matches this message and public key; it does not establish signer identity or trust. Invalid hex/key lengths may error.

Cryptographic digests, encoded strings, and signatures generated by Ed25519 Signature Generator & Verifier should be verified against target authentication systems before production use.

Client-side Web Crypto boundary

Key derivation, hashing, and encoding in Ed25519 Signature Generator & Verifier execute in local memory using Web Crypto APIs without remote socket transmission.

Cryptographic specifications & RFC standards

Technical specifications and cryptographic RFC standards governing algorithms and key representations:

Ed25519 Signature Generator & Verifier verification · Audit standards

How to use it

  1. Enter JSON with a message and optional privateKeyHex; without a key, signing generates a new random one.
  2. Run locally to sign with Ed25519, returning publicKeyHex, signatureHex and a local verification flag.
  3. For verification, enter operation verify, the same message, publicKeyHex and signatureHex; read valid.

Frequently asked questions

How does Ed25519 Signature Tool choose sign or verify mode?+

It parses JSON and defaults operation to sign. The supplied message is UTF-8 encoded; verify requires signatureHex and publicKeyHex.

What is returned in signing mode?+

Signing returns algorithm Ed25519, operation sign, privateKeyHex, publicKeyHex, signatureHex, and verified after locally checking that signature.

What example can I run locally?+

A sign request for CZOA returned verified true, a 32-byte private key, 32-byte public key, and a 64-byte signature represented as hex.

What does verify mode report?+

Verify returns JSON with algorithm, operation verify, and valid. It does not establish a signer identity, certificate chain, timestamp, or authorization.