Repository navigation
Support RFC 9864 Fully specified algorithms (Ed25519, Ed448, etc.) #1190
Description
Activity
Hi! If no one's already working on this, I'd be happy to take it. The fix should be simple: add
Ed25519andEd448to get_default_algorithms() (validating the curve, like the recent EC change).you are welcome
heya 👋🏼,
i also would like to see this happen, and i already started working on it last week. didn't want to post here until it was ready, but since others also expressed interest, it would be good to avoid unnecessary duplicated efforts.
get_default_algorithms()indeed needs some changes, but it's slightly more involved though, b/c of all the extra checks, and covering all that with tests, which should test all cases including backwards compat, invalid key types, etc. in addition it also needs some doc updates, etc.i'll try to find some time to dust off my work in progress and cook up a MR this week!
Reacted by Michele Angrisano@wbolster Don’t worry about it. Carry on with your work, and if you run into any problems, feel free to write here. I’ll be happy to help.
Reacted by wouter bolsterleei've just opened PR #1199 that adds support for ‘alg: Ed25519’ and ‘alg: Ed448’.
maintainers and those who showed interest (👋🏼 @mangrisano @auvipy), please have a look!
Reacted by Michele AngrisanoLGTM. Just a non-blocking note: Ed448’s hash is SHAKE256 specifically (SHA-3 family), so SHA-3 is a little imprecise — might be worth naming it SHAKE256. Does that sound right?
- added a commit that references this issue
on Aug 20, 2026 Ed448’s hash is SHAKE256 specifically (SHA-3 family) […] might be worth naming it SHAKE256
sure! i've just pushed a change that makes the text more generic and specifically mentions SHAKE256.
(pls use review on the pull request #1199 itself if possible)
Feature request
Add support for fully specified algorithms such as
Ed25519.These algorithms were added by RFC 9864.
You can see the full list of registered algorithms here: https://www.iana.org/assignments/jose/jose.xhtml#web-signature-encryption-algorithms
My issue
I tried using
Ed25519with thePyJWKClientand it didn't work. The key was silently skipped, and then I got a confusingkeyset has no key for kiderror.The actual error was:
Then I tried to workaround the issue by manually re-registering
EdDSAasEd25519, but that didn't work becausePyJWKonly consults the default algorithms.If it was possible to override the algorithms used, that would fix my issue too.