On Sun, Apr 15, 2012, Jeffrey Walton wrote: > On Sun, Apr 15, 2012 at 12:01 PM, <[email protected]> wrote: > > Hello guyz and cryptobrains! :P > > > > One of the main disadvantages of EC on openssl seems to be the inability > > to create arbitrary-sized keys and advantage for RSA: you can create 32768 > > bit RSA key but... not greater than 521 bits on ECC. > > > > Will this continue to be a disadvantage or can 32768 RSA key be used > > instead? > Point counting is tricky business. I believe it is the reason most > folks (OpenSSL, Crypto++, NSS, etc) stick with well known curves. > > I don't know how to plug in a custom curve with OpenSSL (I have never > had a need to do it), but I do know how with Crypto++. If I wanted to > do so, I would use Marcel Martin's Elliptic Curve Builder (ECB) to > generate domain parameters to meet security levels. >
It should be possible to use a non-named curve with the appropriate encoding of the ECParameters structure. I've never had to do this either. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
