[openssl-users] genpkey for ed25519
Matt Caswell
matt at openssl.org
Sat Jul 28 11:00:59 UTC 2018
On 27/07/18 15:04, Tomas Mraz wrote:
> On Fri, 2018-07-27 at 09:44 -0400, Robert Moskowitz wrote:
>> Here we go again with figuring out what to put in the command
>> lines.
>> Dr. Google is not giving up enough answers.
>>
>> For ecdsa I started with:
>>
>> openssl genpkey -aes256 -algorithm ec\
>> -pkeyopt ec_paramgen_curve:prime256v1\
>> -outform pem -pkeyopt ec_param_enc:named_curve\
>> -out $dir/private/ca.key.pem
>>
>> I found one reference that I should use -algorithm ed25519 (though
>> the
>> example used caps: ED25519)
>
> Yes, it is case insensitive.
>
>> But I have not found recommendation for ec_parmgen_curve or
>> ec_param_enc
>>
>> Can someone point me to the information on values for these (and I
>> suspect I will be hitting others as I go).
>
> Just do not use these options.
>
Just to add to this, the genpkey documentation gives an example for
X25519 and ED448. Its the same for ED25519:
https://www.openssl.org/docs/manmaster/man1/genpkey.html
Matt
More information about the openssl-users
mailing list