ECDSA test key/files

Hi,

I tried to look at supporting ECDSA in the nss backend. Here is a work
in progress code:

https://github.com/vmiklos/xmlsec/tree/nss-ecdsa-wip

(I'll send a pull request when it actually works.)

It currently fails as it seems the enveloping-sha512-ecdsa-sha512.xml
test file is using an EC key where the parameter is secp256k1, which is
not supported by NSS.

Here is a list of parameters supported by NSS:

http://www.mail-archive.com/[email protected]/msg12766.html

So based on that, perhaps I would start with secp256r1. Which leads to
the question I would like this ask:

How are the ecdsa-secp256k1 test keys are generated? I found no commands
regarding them in tests/keys/README.

If the documentation could be updated, then perhaps a way forward would
be adding ecdsa-secp256r1 testcases for openssl, and then I could
validate my NSS code by making sure the same tests pass for the NSS
backend as well.

Thanks,

Miklos

_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlikOd8ACgkQe81tAgORUJau5ACff+hSDWH+85dqMs7JrWHTlOf4
a10An1iWVFqwFSjBxHCOIpoEEyZA7QUJ
=pERA
-----END PGP SIGNATURE-----