What are your thoughts on prototype status of NaCL's ed25519 signatures and the updated structure used in libsodium, supercop, ed25519-donna etc....?
Should we prefer curve25519 from NaCL but stick with the finalized ed25519 construction for signatures and long term compatibility?