[openssl-users] Creating an X25519-based Certificate

Michael Scott mike.scott at miracl.com
Wed Jun 29 14:46:13 UTC 2016


Hello,


How do I do this? Using the OpenSSL command line tool, a certificate
request must be self-signed, but the X25519 elliptic curve (newly supported
in version 1.1.0), doesn't do signature, it can only be used for key
exchange.

(Of course the X25519 Montgomery curve is birationally equivalent to an
Edwards curve which can do signature. And indeed it is our intention to use
the Edwards curve. But first I need a CA-signed X25519 cert. But because of
the above catch-22 problem, I cannot create one.)


Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160629/81c0f545/attachment.html>


More information about the openssl-users mailing list