> External cryptographic modules may store addition information to key. > What about to define CRYPTO_EX_DATA for ec keys? That is the plan -- we will remove EX_EX_DATA and the internal API and just use the standard crypto_ex_data stuff. Want to make a more complete patch as a github pull request? :) Otherwise I'll get to it soon.