Add support for 25519 and 448

[rmhrisk]

https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix/

[gnarea]

FYI: There's a proposal to bring Curve25519 to WebCrypto (see also tQsW/webcrypto-curve25519#6). Although I guess we'd also need @peculiar/webcrypto to support it so it can be used on Node.js.

[gnarea]

Support for both curves just landed on Node 15.8: nodejs/node@53a0bdff47

[rmhrisk]

@gnarea PRs welcomed /cc @microshine

[microshine]

I like the idea to support those curves

[gnarea]

I'll try to have a go in the coming weeks.

Presumably we'll have to change https://github.com/PeculiarVentures/webcrypto too, and make sure that when other engines (e.g., the browser-based one) use of these algorithms a meaningful error is thrown (like "Ed25519 is not supported by this engine").

[microshine]

@gnarea The latest version of @peculiar/webcrypto supports EdDSA and ECDH-ES mechanisms with (Ed25519, Ed448, X25519 and X448 curves)
PeculiarVentures/webcrypto#25

[microshine]

@gnarea For which operation do you need those curves (eg CSR/cert generation, chain validation, etc)?

[gnarea]

Awesome! 👏 👏

I only need to do these things with Ed25519/Ed448:

• Issue certificates.
• Validate chains.
• Sign SignedData values.
• Verify SignedData values.

[microshine]

I'm going to support those mechanisms in webcrypto-liner too (~1 week)

PKIjs allows supporting new mechanism by extending CryptoEngine. See an example of an extended engine https://github.com/PeculiarVentures/PKI.js/blob/master/examples/NodePKCS12Example/NodeEngine.js

[gnarea]

That's amazing!

We're in a code freeze right now because we're getting ready to launch, but I'll try it as soon as I can afterwards.

[microshine]

@gnarea I added an example with an updated liner for trying
PeculiarVentures/webcrypto-liner#57 (comment)

[gnarea]

Thanks for the example @microshine! Seems pretty straightforward which is awesome.