We could easily add support for ECDSA over NIST P-384 (akan secp384r1) and the enormous curve NIST P-521 (secp521) since BearSSL supports them and we're already including the corresponding files in amalgamate.sh.
P-384 may be worth it since it seems supported by the yubikey's PIV applet.
We would need to write new functions similar to p256_verify, and think hard about a change to the projects name 🤔. Probably worth distributing different files (e.g. p384.c and p521.c)?
We could easily add support for ECDSA over NIST P-384 (akan secp384r1) and the enormous curve NIST P-521 (secp521) since BearSSL supports them and we're already including the corresponding files in
amalgamate.sh
.P-384 may be worth it since it seems supported by the yubikey's PIV applet.
We would need to write new functions similar to
p256_verify
, and think hard about a change to the projects name 🤔. Probably worth distributing different files (e.g.p384.c
andp521.c
)?