Skip to main content

Guide for building an EdDSA PKI

Document Type Replaced Internet-Draft (individual)
Expired & archived
Authors Robert Moskowitz , Henk Birkholz , Michael Richardson
Last updated 2023-07-10
Replaced by draft-moskowitz-ec-pki
RFC stream (None)
Intended RFC status (None)
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Replaced by draft-moskowitz-ec-pki
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


This memo provides a guide for building a PKI (Public Key Infrastructure) using openSSL. Certificates in this guide can be either ED25519 or ED448 certificates. Along with common End Entity certificates, this guide provides instructions for creating IEEE 802.1AR iDevID Secure Device certificates.


Robert Moskowitz
Henk Birkholz
Michael Richardson

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)