Re: X448 vs. ED448?
Viktor Dukhovni <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.user |
|---|---|
| Message-ID | <[email protected]> |
On Wed, Jul 09, 2025 at 03:26:48AM +0000, Mike wrote:
> On the genpkey manual page, what's the difference between these arguments to
> the -algorithm option?
These are two different algorithms:
- Ed448: An elliptic curve signature algorithm, based on a 448-bit
curve in Edwards form.
- X448: An elliptic curve key agreement algorithm, based on a 448-bit
curve in "Edwards form".
In typical applications you'd want the Ed448 key. Use of "fixed (EC)DH"
public key certificates is far from common (e.g., not used in TLS 1.3,
and no longer supported even for TLS 1.2 since OpenSSL 1.1.0.
Key exchange is almost always ephemeral, so you wouldn't normally need
go use genpkey with X448.
--
Viktor. 🇺🇦 Слава Україні!
--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/aG3suPMk7QSAvN6y%40chardros.imrryr.org.