Is TweetNaCl secure enough? I decided to use TweetNaCl in my project and did some tests. For some reason, its Ed25519 signing mechanism gives me very short public and private keys, as opposed to RSA, though RSA, as I it explained to me, is not secure.



So can I trust this implementation, experts, please?
As explained in the link posted by bkjvbx, the short keys and signatures offer the same security level as ~3000-bit RSA.

Regarding the implementation, TweetNaCL's code has been written by experts, has been carefully reviewed and is something you can trust. The only catch is that it is very slow.