[PATCH] Enabling ECDSA in PKCS#11 support for ssh-agent

Damien Miller djm at mindrot.org
Fri Oct 9 04:29:57 AEDT 2015


On Thu, 8 Oct 2015, Douglas E Engert wrote:

> Then what is:
> 1.3.6.1.4.1.11591.15.1 Ed25519
> 
> defined here:
>  https://www.gnu.org/prep/standards/html_node/OID-Allocations.html
> 
> The whole idea of namedCurve was you did not have to pass in the parameters,
> and PKIX certificates only allow namedCurve.

Ed25519 is a different algorithm to ECDSA, not just a different curve.

-d


More information about the openssh-unix-dev mailing list