On 20 March 2013 10:36, Leon Brits <le...@parsec.co.za> wrote: > List, > > I've continued so long to use the NIST prime curves to implement sign/verify > using EVP. I am basically using the same code as for RSA and DSA. This > mechanism is so transparent (nice!) that I just want to verify that it is > using ECDSA at the backend? Do you have any reference to this fact, which I > can add to my code for when the client audits the code? >
The EVP api will work out what kind of sign/verify operation to do based on the type of the key. If the EVP_PKEY type is EVP_PKEY_EC then it will use ECDSA, if its EVP_PKEY_RSA it will use RSA, it its EVP_PKEY_DSA it will use DSA. I've written some of this up on the new wiki: http://wiki.opensslfoundation.com/index.php/EVP#Working_with_EVP_PKEYs Matt ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org