Ryan Hurst wrote:
>
> Has any work been done to add ECDSAwithSHA1 (1.2.840.10045.4.1) to OpenSSL?
> I see that the appropriate NIDs have been added in but I am assuming this is
> simply a result of their inclusion in
> http://www.ietf.org/internet-drafts/draft-ietf-pkix-ipki-pkalgs-03.txt.
>
> I am interested in using OpenSSL to verify the Certicom ECC root, I am aware
> of the patent issues involved in ECC but am curious if there are appropriate
> patches available to OpenSSL to support ECC natively or with a patch that
> would utilize the Certicom Security Builder SDK.
>
What field does the Certicom ECC root use, is it available anywhere?
There's currenttly no ECDSA support in OpenSSL but some EC operations
are in the latest development version, however they only work on prime
fields not 2^m fields. 2^m fields tend to have more patents associated
with them.
It isn't currenly possible to just plug in a new public key crypto
algorithm into OpenSSL and it would in any case need ASN1 support with
the EC public key format. This would require quite a bit of modification
to OpenSSLs core code.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
