The elliptic curve signature scheme Edwards-curve Digital Signature Algorithm (EdDSA) is described. The algorithm is instantiated with recommended parameters for the Curve25519 and Curve448 curves. An example implementation and test vectors are provided. NOTE: Anything not about Ed25519 in this document is extremely premature and there is at least one FIXME that makes some things unimplementable.