Re: In-the-wild implementations of RFC6955?

Michael StJohns <[email protected]> writes:

>I always considered that the curve OID constrained the appropriate set of
>cryptographic functions.

Not for the widely-used NIST curves, the same curves with the same OID are
used for both ECDH and ECDSA.  

Or at least they would be if anyone use ECDH certificates.

>I can create a EC CSR with a keyAgreement only keyUsage and do it without
>using the proposed EC key in anything but ECDH.

Sure, but then you'd have to find something that implements RFC 6955 to get it
signed.  And after that, something that does static-ephemeral (EC)DH via
certificates once you've got the cert.  

A strange game. The only winning move is not to play.

Peter.