Djam/arm-trusted-firmware
1
0
Fork 0
mirror of https://github.com/ARM-software/arm-trusted-firmware.git synced 2025-04-16 09:34:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(cert-create): ecdsa p384 key support

Browse source 
Adding ECDSA P384 (secp384r1) key creation support through key_bits
obtained from KEY_SIZE.

Change-Id: I571251caef20222990bd927cdfb5f35bf2a185d0
Signed-off-by: Lauren Wehrmeister <lauren.wehrmeister@arm.com>
This commit is contained in:
laurenw-arm 2023-08-15 14:53:59 -05:00
parent ad4e978774
commit c512c89cde
2 changed files with 16 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
tools/cert_create/include/key.h
View file

@ -1,5 +1,5 @@
/*
* Copyright (c) 2015-2022, Arm Limited and Contributors. All rights reserved.
* Copyright (c) 2015-2023, Arm Limited and Contributors. All rights reserved.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
@ -44,7 +44,7 @@ enum{
static const unsigned int KEY_SIZES[KEY_ALG_MAX_NUM][KEY_SIZE_MAX_NUM] = {
{ 2048, 1024, 3072, 4096 }, /* KEY_ALG_RSA */
#ifndef OPENSSL_NO_EC
{}, /* KEY_ALG_ECDSA_NIST */
{ 256, 384 }, /* KEY_ALG_ECDSA_NIST */
{}, /* KEY_ALG_ECDSA_BRAINPOOL_R */
{} /* KEY_ALG_ECDSA_BRAINPOOL_T */
#endif /* OPENSSL_NO_EC */

17
tools/cert_create/src/key.c
View file

@ -1,9 +1,10 @@
/*
* Copyright (c) 2015-2022, Arm Limited and Contributors. All rights reserved.
* Copyright (c) 2015-2023, Arm Limited and Contributors. All rights reserved.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
#include <assert.h>
#include <getopt.h>
#include <stdio.h>
#include <stdlib.h>
@ -112,7 +113,12 @@ static int key_create_ecdsa(key_t *key, int key_bits, const char *curve)
static int key_create_ecdsa_nist(key_t *key, int key_bits)
{
return key_create_ecdsa(key, key_bits, "prime256v1");
if (key_bits == 384) {
return key_create_ecdsa(key, key_bits, "secp384r1");
} else {
assert(key_bits == 256);
return key_create_ecdsa(key, key_bits, "prime256v1");
}
}
static int key_create_ecdsa_brainpool_r(key_t *key, int key_bits)
@ -154,7 +160,12 @@ err:
static int key_create_ecdsa_nist(key_t *key, int key_bits)
{
return key_create_ecdsa(key, key_bits, NID_X9_62_prime256v1);
if (key_bits == 384) {
return key_create_ecdsa(key, key_bits, NID_secp384r1);
} else {
assert(key_bits == 256);
return key_create_ecdsa(key, key_bits, NID_X9_62_prime256v1);
}
}
static int key_create_ecdsa_brainpool_r(key_t *key, int key_bits)