Add experimental support for secp256r1 aka P-256 aka prime256v1
authorjob <job@openbsd.org>
Thu, 19 Oct 2023 17:05:54 +0000 (17:05 +0000)
committerjob <job@openbsd.org>
Thu, 19 Oct 2023 17:05:54 +0000 (17:05 +0000)
commitec1cc732eea452b2c8e9f1282111d9cc0104e4b6
tree589a1fcfc6d3b4f0f2a5ebd80963bf9875924f61
parentf77c9c95a26a7216ecbd417046c41383cd030d5b
Add experimental support for secp256r1 aka P-256 aka prime256v1

ECDSA signatures are much smaller than RSA signatures while offering
similar security. Adding support for P-256 now allows CA developers
to test their implementations, and paving the way for signers in the
production environment in the future to take advantage of ECDSA.

OK tb@
usr.sbin/rpki-client/cert.c
usr.sbin/rpki-client/cms.c
usr.sbin/rpki-client/crl.c
usr.sbin/rpki-client/validate.c