Incorrect key ID type used in some ed25519 certificates

In cert-spec.txt we specify several possible values for the CERT_KEY_TYPE field, in section A.4. But we don't actually use those: everywhere that we call tor_cert_sign_impl() , signed_key type is set to SIGNED_KEY_TYPE_ED25519.

We should adjust the spec to clarify that current tor implementations behave, and (assuming it won't introduce compatibility issue) adjust Tor relay behavior to conform to the spec. We should probably leave onion service behavior alone.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information