I'd like to have support for ECDSA_P521_SHA512_ASN1_SIGNING signing, DER export and key generation as there already is support for ECDSA_P256_SHA256_ASN1_SIGNING or ECDSA_P384_SHA384_ASN1_SIGNING.
See also: https://tools.ietf.org/html/rfc5480#section-4 for a list of possible combinations.
est31
All 6 comments
@est31 Which software uses p521 SHA-512?
briansmith
on 12 Jun 2019
Which software uses p521 SHA-512?
I just wanted it for completion. If you don't feel there is a need, feel free to close this.
Openssl supports p521 but it seems to sign using SHA-256. E.g. openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:P-521 -pkeyopt ec_param_enc:named_curve generates a key but if you use it to sign a csr, it uses a SHA-256 hash. Firefox is at least capable of displaying the key, haven't tested more.
est31
on 12 Jun 2019
I would also like this feature, I'm trying to implement a software which is built on p521 SHA-512 and would like to use ring as a crypto library. This is a feature that cfssl does have.
EvanDarwin
on 5 Jul 2019
Please have somebody with spending authority email me: [email protected].
briansmith
on 5 Jul 2019
I would be interested in donating to help get this feature implemented. I went ahead and sent you an email @briansmith.
EvanDarwin
on 5 Jul 2019
SSH keys can be ecdsa-sha2-nistp521 as well
obelisk
on 8 Jan 2021
Related issues
kpcyrd
路
8Comments
PvdBerg1998
路
10Comments
Xiphoseer
路
5Comments
drahnr
路
6Comments
neoeinstein
路
5Comments
Most helpful comment
I would be interested in donating to help get this feature implemented. I went ahead and sent you an email @briansmith.