CVSROOT:        /cvs
Module name:    src
Changes by:     t...@cvs.openbsd.org    2025/05/03 23:10:14

Modified files:
        lib/libcrypto/ec: ec_curve.c 

Log message:
Remove the X9.62 prime239v{1,2,3} curves

While RFC 3279 allows these curves for use in X.509 certificates (*), no
one actually does this. Certs using these curves cannot be used for TLS
and the curves aren't accepted by FIPS either. codesearch shows no actual
uses of these curves, only their OIDs are listed. At this point these
have become useless historical baggage.

ok jsing

(*) Of the 27 curves listed in RFC 3279 the only one that seems to have
seen actual use in certificates is P-256.

Reply via email to