FIPS-140 approved curves?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



EC_get_builtin_curves() will give you a list of supported curves.  However, in a FIPS-140 installation, EVP_EC_gen() appears to reject most of them.  (Oddly, saying "unknown group".)

And even for the 15 that EVP_EC_gen() accepts, several (B-163, K-163, P-192) can't be used for signing certificates and requests.  (Says "Curve X-yyy cannot be used for signing".)

Is there an easy way to get a list of FIPS-140 approved curves that can be used for signing certificates and requests, or do you have to try each one and see if it works?

OpenSSL 3.0.10.
-- 
Jordan Brown, Oracle ZFS Storage Appliance, Oracle Solaris

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux