On 02/13/2013 02:51 PM, Niels Möller wrote:

> [email protected] (Niels Möller) writes:
> 
>> I'd like to post the interface I use for low-level ecc functions.
> 
> And here's the current interface for ECDSA functions. Low-level
> functions with similar conventions as the low-level ecc functions. And
> high-level functions using mpz_t for arguments, and using the same
> allocation function as GMP for storage.


Hello Niels,
 I've checked the high level functions and they seem fine. As far as I
am concerned I think they can easily update the current gnutls code.

About the naming you use ecdsa_private_key and public_key. Note that
this is the same key for static ECDH, and I think MQV.

If there is a function to do the DH multiplication k*(ecdsa_public_key)
I think the gnutls could be tested with that interface, if I get some
time to do that.

> But for ecdsa, do we need any functions like that? I guess, for


I don't know. I wouldn't probably use them, but others may.

> which take a hashing context as argument. Which hash functions are

> people using for ecdsa with the various curves? RFC 4754 (IKE and IKEv2
> Authentication Using ECDSA) defines:
>        ECDSA-256          256-bit random ECP group        SHA-256
>        ECDSA-384          384-bit random ECP group        SHA-384

>        ECDSA-521          521-bit random ECP group        SHA-512

As far as I know these are the only allowed by the DSS standard (I was
under the impression that SHA-224 was also allowed).

regards,
Nikos
_______________________________________________
nettle-bugs mailing list
[email protected]
http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs

Reply via email to