Menu

#73 Add further EC curves supported by OpenSSL

closed
None
8
2014-10-24
2013-11-22
No

Since OpenSSL supports a couple of more EC curves than currently selectable by XCA, I suggest adding them. I attach the respective patch.

1 Attachments

Discussion

  • Christian Hohnstaedt

    Thanks for the patch.
    If you send me your name and email address, I'll use them as <author> in the commit. Otherwise just a 'Thanks "dvo" for the patch'

     
  • David von Oheimb

    You're welcome. My name is David von Oheimb, and my email address is David.von.Oheimb@siemens.com.

    BTW, I just realized that for completeness the following ones can be added as well:

    NID_wap_wsg_idm_ecid_wtls1,
    NID_wap_wsg_idm_ecid_wtls3,
    NID_wap_wsg_idm_ecid_wtls4,
    NID_wap_wsg_idm_ecid_wtls5,
    NID_wap_wsg_idm_ecid_wtls6,
    NID_wap_wsg_idm_ecid_wtls7,
    NID_wap_wsg_idm_ecid_wtls8,
    NID_wap_wsg_idm_ecid_wtls9,
    NID_wap_wsg_idm_ecid_wtls10,
    NID_wap_wsg_idm_ecid_wtls11,
    NID_wap_wsg_idm_ecid_wtls12,
    NID_ipsec3,
    NID_ipsec4,
    

    And I'm currently working on integrating Brainpool curves, too:

    NID_brainpoolP160r1,
    NID_brainpoolP160t1,
    NID_brainpoolP192r1,
    NID_brainpoolP192t1,
    NID_brainpoolP224r1,
    NID_brainpoolP224t1,
    NID_brainpoolP256r1,
    NID_brainpoolP256t1,
    NID_brainpoolP320r1,
    NID_brainpoolP320t1,
    NID_brainpoolP384r1,
    NID_brainpoolP384t1,
    NID_brainpoolP512r1,
    NID_brainpoolP512t1
    

    as defined in http://rt.openssl.org/Ticket/Display.html?id=2239&user=guest&pass=guest (and referred to in the OpenSSL extension request http://openssl.6102.n7.nabble.com/openssl-org-2359-PATCH-td41171.html).

     
  • David von Oheimb

    Meanwhile I've tried out support for the Brainpool curves. For some detail see
    http://rt.openssl.org/Ticket/Display.html?id=3180&user=guest&pass=guest
    and the attached minor XCA extension.

    I suggest generally activating the references to the Brainpool curves as soon as OpenSSL 1.0.2., which includes them, is generally available.

     
  • David von Oheimb

    I hope that both the patches proposed here will be part of the next release.

     
  • Christian Hohnstaedt

    • status: open --> closed
     
  • Christian Hohnstaedt

    Fixed in XCA 1.0.0

    commit c28c15495d859165fa25b946fcd7a0e5ebadcca8
    Author: Christian Hohnstaedt chohnstaedt@innominate.com
    Date: Tue Apr 8 23:23:23 2014 +0200

    SF FeatureReq. #73 Add further EC curves supported by OpenSSL
    
    Add support for NID_wap_wsg_idm_ecid_wtls1 - 12 curves
    Add support for BrainPool curves if openssl version >= 1.0.2 beta1
    
     

Log in to post a comment.