WordPress To Start Using Cryptographic Public Key

WordPress has updated its content management system with a whole lot of new security features. WordPress 5.2 will feature an Ed25519 public-key signature system, similar to Monero (XMR).

WordPress, which is being installed on around 34 per cent of all internet sites, has made security a necessity. The platform has just disclosed new security updates which should put web owners at ease and not worry about breach of security.

One of the security updates is the implementation of an Ed25519 public-key system that will allow its users to digitally sign all update packages. All types of local installations will henceforth be verified to ensure its authenticity before installation.

The new cryptographic measures also boost protections for the entire update system overall, other than just protecting against malicious installations. Security firms have warned that if WordPress’s update server was ever hacked, a supply-chain attack was possible.

With the release of WordPress 5.2, hackers would not only have to somehow sign the key, but they also have to infiltrate WordPress’s own centralized servers. Such a big feat is near impossible to carry out.

The EdDSA public-key cryptography was developed to be secure,  without the slow speeds of other protocols. One of the most popular use-cases of the EdDSA public key has been the CryptoNote cryptocurrency protocol. It was originally designed to solve the reported problems with Bitcoin Core, but the protocol has been hugely influential among privacy-oriented cryptocurrencies.

Now, CryptoNote is famous for its use for Monero (XMR). Written in C++, the latest iteration of CryptoNote was released in 2013 in a paper written by Nicolas van Saberhagen.

It seems that WordPress has learned quite a bit from the cryptocurrency space, with its adoption of the EdDSA cryptography. As years pass without any major breach or hiccup, Monero’s CryptoNote protocol is standing out as a ‘gold standard’ of security. It may serve as a model for cryptographic security and privacy beyond just the blockchain industry, in the near future.