On 2013-11-06 18:54, Kenny Root wrote:
> As strange as it sounds, you can KeyPairGenerator.get instance("RSA", 
> "AndroidKeyStore") and on the params call .setKeyType("EC") This is a bug 
> that will be fixed in a future release.

Thanx Kenny!

It would be awfully nice if the bouncastle library made it into the public API 
one day.

Anders

> 
> Brainpool curve support is not in a released version of OpenSSL.
> 
> On Nov 5, 2013 11:05 AM, "Anders Rundgren" <[email protected] 
> <mailto:[email protected]>> wrote:
> 
>     
> https://android.googlesource.com/platform/frameworks/base.git/+/android-4.4_r1/keystore/java/android/security/AndroidKeyStoreProvider.java
> 
>     Generating EC keys doesn't not work with the public API for 
> "AndroidKeyStore" since there is no entry for that although there is an 
> implementation.
> 
>     In addition, I wonder why key-size has been used instead of curve-names 
> which both OpenSSL and BC support since ages back.
>     BrainpoolP256r1 is pretty popular in Europe and is supported by both 
> libraries as far as know.
> 
>     thanx
>     Anders
> 
>     --
>     You received this message because you are subscribed to the Google Groups 
> "Android Security Discussions" group.
>     To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected] 
> <mailto:android-security-discuss%[email protected]>.
>     To post to this group, send email to 
> [email protected] 
> <mailto:[email protected]>.
>     Visit this group at 
> http://groups.google.com/group/android-security-discuss.
>     For more options, visit https://groups.google.com/groups/opt_out.
> 

-- 
You received this message because you are subscribed to the Google Groups 
"Android Security Discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/android-security-discuss.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to