Skip to content
/ exp2nam Public

Tool to convert EC keys from explicit to named parameters

License

Notifications You must be signed in to change notification settings

nuxi/exp2nam

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

This program converts an elliptic curve private key from using explicit
parameters to using a named curve. The OpenSSL command line tools do not
support doing this.

I knew enough about the key format to know that this was theoretically
possible and decided to write a tool that does it. This builds against
OpenSSL 1.0.x and OpenSSL 1.1.x. I may try to get this integrated into the
OpenSSL command line tools some day.

The program supports input in both PEM and DER format. The program will
output to whatever format the input was in. If the input was DER the output
must be redirect, the program will not print binary data to your terminal.

Why would you want to do this?

Well CentOS/RHEL 6's OpenSSH package has slightly broken backported ECDSA
support.  Specifically it generates private keys with explicit parameters
instead of named curves. Stock OpenSSH only supports keys with named curves. I
didn't want to regenerate one of my server's SSH hostkeys after upgrading.
I'm sure other use cases exist.

Also yes, this repository delibrately contains private key material.
I generated 3 ECDSA SSH keys on a CentOS 6 host for test purposes. These
keys have never been used and exist to confirm that this program works.

About

Tool to convert EC keys from explicit to named parameters

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published