Re: EC curve names

2011-03-22 Thread Douglas E. Engert
On 3/22/2011 12:31 PM, Massimiliano Pala wrote: Hi Douglas, the issue here is to be sure that things are done correctly - e.g., for testing that the crypto used by the CA issuing a certificate is ok. In any case, the NID from the signer can be missing (in fact, AFAIK, the curves should be prov

Re: EC curve names

2011-03-22 Thread Massimiliano Pala
Hi Douglas, the issue here is to be sure that things are done correctly - e.g., for testing that the crypto used by the CA issuing a certificate is ok. In any case, the NID from the signer can be missing (in fact, AFAIK, the curves should be provided with explicit params - implicit params are de

Re: EC curve names

2011-03-22 Thread Douglas E. Engert
On 3/22/2011 10:10 AM, Massimiliano Pala wrote: Hello Stephen, all, thanks for all the advices, I ended up doing the following: 1. Grab the Key from the Certificate 2. Cycle through the built-in curves 3. Generate a new point from the Key's group 4. if order(curve[i]) == order(key) and point i

Re: EC curve names

2011-03-22 Thread Massimiliano Pala
Hello Stephen, all, thanks for all the advices, I ended up doing the following: 1. Grab the Key from the Certificate 2. Cycle through the built-in curves 3. Generate a new point from the Key's group 4. if order(curve[i]) == order(key) and point is on curve[i] ==> curve found! ; return nid 5. i

Re: EC curve names

2011-03-22 Thread Douglas E. Engert
On 3/22/2011 9:25 AM, Massimiliano Pala wrote: Hello Peter, all, thanks for the hint.. but I was actually looking more at a way to check if a certificate has been signed with one of the curves you listed. Maybe it is not possible, but it would be nice to be able to say "this certificate has be

Re: EC curve names

2011-03-22 Thread Dr. Stephen Henson
On Tue, Mar 22, 2011, Massimiliano Pala wrote: > Hello Peter, all, > > thanks for the hint.. but I was actually looking more at a way to check if > a certificate has been signed with one of the curves you listed. Maybe it is > not possible, but it would be nice to be able to say "this certificate

Re: EC curve names

2011-03-22 Thread Massimiliano Pala
Hello Peter, all, thanks for the hint.. but I was actually looking more at a way to check if a certificate has been signed with one of the curves you listed. Maybe it is not possible, but it would be nice to be able to say "this certificate has been signed with P-256" - since this can be a requir

Re: EC curve names

2011-03-22 Thread Douglas E. Engert
On 3/21/2011 7:01 PM, Massimiliano Pala wrote: Hi all, I was wondering: how do I verify if a pkey used in an ECDSA certificate is on one specific curve ? The certificate should have as part of the Public Key Info the OID of the curve used, (or the parameters of the curve) Or, better, how t

Re: EC curve names

2011-03-21 Thread Peter Waltenberg
Date: 22/03/2011 10:08 AM Subject:EC curve names

EC curve names

2011-03-21 Thread Massimiliano Pala
Hi all, I was wondering: how do I verify if a pkey used in an ECDSA certificate is on one specific curve ? Or, better, how to easily print out the txt identifier of the curve used in a certificate ? That would be a useful addition to the output in a ECDSA certificate. Something like: ... C