# Review my Noir - Ed25519 signature verification

**URL:** <https://forum.aztec.network/t/review-my-noir-ed25519-signature-verification/8604>\
**Category:** Noir\
**Tags:** noir\
**Created:** [June 29, 2026, 5:51am UTC](https://forum.aztec.network/t/review-my-noir-ed25519-signature-verification/8604 "2026-06-29T05:51:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![willemolding](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.aztec.network/willemolding/32/2980_2.png) [@willemolding](https://forum.aztec.network/u/willemolding)\
**Post date:** [June 29, 2026, 5:51am UTC](https://forum.aztec.network/t/review-my-noir-ed25519-signature-verification/8604/1 "2026-06-29T05:51:02Z")

</div>

I’ve built an [IRTF RFC-8032](https://www.ietf.org/rfc/rfc8032.txt) compliant implementation of Ed25519 signature verification in Noir. This was able to reuse a lot of existing pieces so ended up being fairly straightforward (but expensive in terms of gate count).

It falls into two main pieces:

- [noir-edwards-bignum](https://github.com/willemolding/noir-edwards-bignum) - A fork of noir-edwards that allows you to use Bignum to define the base field. See [the diff](https://github.com/noir-lang/noir-edwards/compare/main...willemolding:noir-edwards-bignum:main)
- [noir-ed25519](https://github.com/willemolding/noir-ed25519) - The signature verification logic. Based on noir-eddsa.

If anyone is able to give it a review I would really appreciate it