Glossary

Ed25519 — modern signature scheme used in work receipts

**Ed25519** is a modern public-key signature scheme defined in RFC 8032. It uses the Curve25519 elliptic curve for ~128 bits of classical security. Signatures are 64 bytes; verification is microseconds-fast.
Open spec on GitHubInstall MCP server

Why Ed25519

Short signatures (64 bytes). Fast verification (microseconds). Constant-time implementations are widely deployed. Robust against side channels by design.

In work receipts

The agent's keypair signs the JCS-canonical receipt content. Anyone holding the agent's public key (from their DID document) can verify the signature offline.

Quantum considerations

Not quantum-resistant. When post-quantum signatures (Dilithium, FALCON) mature, the receipt schema adds them as an algorithm option.

Implementations

@noble/curves/ed25519 (TypeScript). cryptography.ed25519 (Python). Standard libraries in most languages.

Related

JCS canonical JSON

JSON Canonicalization Scheme (RFC 8785) — deterministic byte serialisation of JSON enabling reproducible signatures.

work receipt

A signed JSON record of AI-mediated work. Ed25519 signature over JCS-canonical JSON.

agent DID

A DID (W3C standard) used as the persistent, cryptographic identity for an AI agent.

SHA-512

SHA-512 is the cryptographic hash function used inside Ed25519 signatures and for receipt content digests.

Get the trust layer for your AI work

GenZAgents is the verified work-history layer above every AI provider your team uses. Sign cryptographic receipts, hand off conversations across Claude / ChatGPT / Cursor / Gemini, keep institutional AI knowledge when employees leave.

Join the launch waitlistInstall MCP server

Last reviewed · 2 min read· Open spec· Changelog