search

hidekatsu-izuno / josekit-rs

JOSE (Javascript Object Signing and Encryption) library for Rust (based on OpenSSL).
Apache License 2.0
69 stars 29 forks source link

Support for Brainpool curves #31

Open FlixCoder opened 5 months ago

FlixCoder commented 5 months ago

Hi!

I know the Brainpool curves are not part of the official JOSE specification, but we need to use them due to German regulations. Would you be up to accept added Brainpool curves to the library?

Openssl already supports them, so the changes are small: https://github.com/hidekatsu-izuno/josekit-rs/compare/master...famedly:josekit-rs:flix/bp256r1

hidekatsu-izuno commented 5 months ago

Hi. @FlixCoder.

I understand your wish but it is difficult to support the Brainpool curves because it is not standard. Supporting unnecessary algorithms may lead to security risks and future incompatibilities. Could you first tell me about German regulations. Where is the document about it ?

If there is official spec, We supports the algorithm.

FlixCoder commented 5 months ago

For the Brainpool curves on their own, there is https://datatracker.ietf.org/doc/html/rfc5639

I do not find any document specifying the use of the Brainpool curves in JWS.

There are however specifications (often in German) that mandate the use of Brainpool: