On Fri, Mar 15, 2013, Dr. Stephen Henson wrote:

> 
> The only real quirk is that when you generate a key the  named curve ASN1
> option isn't set by default for keys and can't be set by a ctrl. You can
> extract the key and set that manually though.
> 

Just to clarify that a bit. EC keys are most comonly represented by named
curves instead of explicit parameters. Unfortunately the default is to use
explicit parameters and there's nothing (yet!) at an EVP_PKEY level to change
that.

They way you can change it is to either take the generated key or parameters
and do something like this:

EC_KEY *ec = EVP_PKEY_get1_EC(key);
EC_KEY_set_asn1_flag(ec, OPENSSL_EC_NAMED_CURVE);
EC_KEY_free(ec);

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to