diff options
author | Eneas U de Queiroz <cotequeiroz@gmail.com> | 2019-08-05 15:34:38 -0300 |
---|---|---|
committer | Jo-Philipp Wich <jo@mein.io> | 2019-09-04 13:45:39 +0200 |
commit | ad4af2b8dff7c6786db8b789fd9e138b1c1e0d2b (patch) | |
tree | 7cac9db7677aff7326ad0ad46b704660c00c574a /rules.mk | |
parent | da10d4a7795ec0bf55c665ff74eceab930623959 (diff) | |
download | upstream-ad4af2b8dff7c6786db8b789fd9e138b1c1e0d2b.tar.gz upstream-ad4af2b8dff7c6786db8b789fd9e138b1c1e0d2b.tar.bz2 upstream-ad4af2b8dff7c6786db8b789fd9e138b1c1e0d2b.zip |
px5g: support EC keys
This adds an 'eckey' command to generate an EC key, with an optional
curve name argument, with P-256 as default.
For the 'selfsigned' command, it adds an 'ec' algorithm argument to the
'-newkey' option, and a '-pkeyopt ec_paramgen_curve:<curvename>' option,
mirroring the way openssl specifies the curve name.
Notice that curve names are not necessarily the same in mbedtls and
openssl. In particular, secp256r1 works for mbedtls, but openssl uses
prime256v1 instead. px5g uses mbedtls, but short NIST curve names P-256
and P-384 are specifically supported.
Package size increased by about 900 bytes (arm).
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit a552ababd4ff8e91d3f03f7496f12d080a71ba28)
Diffstat (limited to 'rules.mk')
0 files changed, 0 insertions, 0 deletions