wycheproof icon indicating copy to clipboard operation
wycheproof copied to clipboard

What ECDSA algorithms/parameters are relevant?

Open bleichenbacher-daniel opened this issue 10 months ago • 6 comments

Since I don't have access to my old code I've rewritten a large fraction of the test vector generation code. One thing I'm wondering however is which parameters/curves etc. for ECDSA are relevant. Concretely:

  • I'm not aware of any apps using ECDSA over binary fields. Am I overlooking something or could these curves be ignored?
  • There is a large number of message digest / curve / signature encoding combinations. I'm trying to figure out which ones are relevant, i.e., explicit choices in proposed protocols.
  • Signature encoding are either DER, P1363, OpenSSH or the v,r,s format used in the "ether" world. For the last one I haven't found any satisfactory documentation (i.e. docs are sometimes contradicting each other)
  • Signature verification through public key recovery allows some new edge cases. These edge cases depend on how the public key recovery is done. I'm trying to find typical implementations.

bleichenbacher-daniel avatar Mar 31 '24 21:03 bleichenbacher-daniel