Skip to content

Opt-in ES256K (RFC 8812) package with a secp256k1 curve #337

Open

Description

@polewskm

ES256K (RFC 8812, ECDSA over secp256k1 with SHA-256) is registered in the IANA JOSE algorithms registry but not supported here.

Ship it as an opt-in package that registers the secp256k1 EccCurveSpecification (ADR-0068) and an EccSignatureAlgorithm bound to that curve. #331 binds each ES* algorithm to its curve, which is what makes this safe: a P-256 key cannot sign as ES256K, and a secp256k1 key cannot sign as ES256. Gate registration on platform support, because .NET cannot use secp256k1 on every operating system (macOS in particular). Part of the coverage tracked in #66.

Not needed for the first deployment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions