search

hockeypuck / hockeypuck

OpenPGP Key Server
Other
299 stars 55 forks source link

Elliptic-curve algorithm names are not informative #340

Open andrewgdotcom opened 1 month ago

andrewgdotcom commented 1 month ago

Algorithm names have historically been constructed as (algid)(bit-length), which works for RSA, DSA, ElGamal etc. but not for elliptic curves, which are identified by their curve. This should be fixed.

andrewgdotcom commented 3 weeks ago

From Vladimyr on matrix:

https://manpages.debian.org/openssl-ecparam.1#list_curves

TBH GnuPG wiki does have a table with supported curves (it's not outdated, I checked): https://wiki.gnupg.org/ECC#Table_of_ECC_supported_functions:

And if you are like me and confused with 3 different ways to referer to same curve:https://www.rfc-editor.org/rfc/rfc4492#appendix-A

secp256r1 (as called by SEC 2 - https://www.secg.org/sec2-v2.pdf) == prime256v1 (as called by ANSI X9.62 - paywalled and superseded standard) == P-256 (as called by FIPS 186-5 - https://csrc.nist.gov/pubs/fips/186-5/final)

Helpful resource: https://neuromancer.sk/std/nist/P-256 There you can check alt names and get common OID

andrewgdotcom commented 2 weeks ago

From sebbu in the same thread:

https://safecurves.cr.yp.to/ is also a good resource, when you click on the column headers you get infos for all the curves listed