Re: Setting a group to an existing EVP_PKEY in OpenSSL 3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On 25/10/2022 00:21, Kory Hamzeh wrote:
I haven’t done exactly what you are trying, but something similar.

  See EVP_PKEY_set_params:

https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_set_params.html <https://www.openssl.org/docs/man3.0/man3/EVP_PKEY_set_params.html>

The specific parm to set the group could be set like this:

  OSSL_PARAM_BLD_push_utf8_string(param_bld, "group",
                                             curve, 0;



"group" is not a "settable" parameter for EC keys. You can "get" it. You can import it (using EVP_PKEY_from_data()). You can export it (using EVP_PKEY_to_data()). But you can't "set" it.

The group is immutable once the key is created.

It really doesn't make sense to change the group of a key from one thing to another. None of the rest of the parameters would be valid if the group changed.


On 25/10/2022 00:35, Martin via openssl-users wrote:
> Thanks for your response. I want to preserve the rest of the EC public
> key params. I did this. I haven’t test yet.

Preserving the rest of the EC public key params doesn't make sense. If the group has changed the key is no longer valid. Just create a new key instead.

Matt



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux