EdDSA ⇒ DS Fully-black-box reduction · standard model · folklore · security loss: none Statement EdDSA is a digital signature scheme, with the same EUF-CMA advantage for every forger — folklore.