[rwth-security] The Provable Security of Ed25519: Theory and Practice