On Fri, Mar 15, 2013, Dr. Stephen Henson wrote: > > The only real quirk is that when you generate a key the named curve ASN1 > option isn't set by default for keys and can't be set by a ctrl. You can > extract the key and set that manually though. >
Just to clarify that a bit. EC keys are most comonly represented by named curves instead of explicit parameters. Unfortunately the default is to use explicit parameters and there's nothing (yet!) at an EVP_PKEY level to change that. They way you can change it is to either take the generated key or parameters and do something like this: EC_KEY *ec = EVP_PKEY_get1_EC(key); EC_KEY_set_asn1_flag(ec, OPENSSL_EC_NAMED_CURVE); EC_KEY_free(ec); Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org