Displaying 2 results from an estimated 2 matches for "implicitlycanul".
Did you mean:
implicitlycanull
2015 Oct 08
3
[PATCH] Enabling ECDSA in PKCS#11 support for ssh-agent
...s, then you
> could leverage it even with version 2.20 of the PKCS#11 standard.
I think you need an OID to put in the namedCurve field of EC Parameters
structure, right? The structure is:
Parameters:: = CHOICE {
ecParametersECParameters,
namedCurveCURVES. & id( { CurveNames}),
implicitlyCANULL}
The ecParametersECParameters approach doesn't work, I believe, for
EdDSA, but a namedCurve would probably do. But what OID to use? I'm
happy to reserve 1.3.6.1.4.1.11591.9 to mean a namedCurve value for
Ed25519 in PKCS#11.
I'm not sure this approach works out -- but let's try....
2015 Oct 08
2
[PATCH] Enabling ECDSA in PKCS#11 support for ssh-agent
On 10/8/2015 4:49 AM, Simon Josefsson wrote:
> Mathias Brossard <mathias at brossard.org> writes:
>
>> Hi,
>>
>> I have made a patch for enabling the use of ECDSA keys in the PKCS#11
>> support of ssh-agent which will be of interest to other users.
>
> Nice! What would it take to add support for Ed25519 too? Do we need to
> allocate any new PKCS#11