> On Tue, Jul 05, 2022 at 12:46:10PM +0200, Miro Hrončok wrote: > IANAL or anybody from Fedora, but a similar > thread is still waiting for > a larger proclaimation about Elliptic Curves in general: > https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.o... > > The package you linked includes secp256k1 and prime256v1. secp256k1 seems to be OK. For example, it is included in nettle, but it removes secp192r1 and secp224r1 from its sources. It is also included in openssl: $ openssl ecparam -list_curves secp224r1 : NIST/SECG curve over a 224 bit prime field secp256k1 : SECG curve over a 256 bit prime field secp384r1 : NIST/SECG curve over a 384 bit prime field secp521r1 : NIST/SECG curve over a 521 bit prime field prime256v1: X9.62/SECG curve over a 256 bit prime field So it looks like the removal of secp192r1 and secp224r1 from nettle seems to be outdated, because at least the latter curve is enabled in OpenSSL. Wasn't there some kind of wiki page that listed elliptic curves which we weren't allowed to ship? I can't seem to find it any longer, so it might have fallen victim to the move of the Legal docs to GitLab ... Fabio _______________________________________________ legal mailing list -- legal@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to legal-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
