-
Notifications
You must be signed in to change notification settings - Fork 0
Tool to convert EC keys from explicit to named parameters
License
nuxi/exp2nam
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
This program converts an elliptic curve private key from using explicit parameters to using a named curve. The OpenSSL command line tools do not support doing this. I knew enough about the key format to know that this was theoretically possible and decided to write a tool that does it. This builds against OpenSSL 1.0.x and OpenSSL 1.1.x. I may try to get this integrated into the OpenSSL command line tools some day. The program supports input in both PEM and DER format. The program will output to whatever format the input was in. If the input was DER the output must be redirect, the program will not print binary data to your terminal. Why would you want to do this? Well CentOS/RHEL 6's OpenSSH package has slightly broken backported ECDSA support. Specifically it generates private keys with explicit parameters instead of named curves. Stock OpenSSH only supports keys with named curves. I didn't want to regenerate one of my server's SSH hostkeys after upgrading. I'm sure other use cases exist. Also yes, this repository delibrately contains private key material. I generated 3 ECDSA SSH keys on a CentOS 6 host for test purposes. These keys have never been used and exist to confirm that this program works.
About
Tool to convert EC keys from explicit to named parameters
Topics
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published