wycheproof
wycheproof copied to clipboard
What ECDSA algorithms/parameters are relevant?
Since I don't have access to my old code I've rewritten a large fraction of the test vector generation code. One thing I'm wondering however is which parameters/curves etc. for ECDSA are relevant. Concretely:
- I'm not aware of any apps using ECDSA over binary fields. Am I overlooking something or could these curves be ignored?
- There is a large number of message digest / curve / signature encoding combinations. I'm trying to figure out which ones are relevant, i.e., explicit choices in proposed protocols.
- Signature encoding are either DER, P1363, OpenSSH or the v,r,s format used in the "ether" world. For the last one I haven't found any satisfactory documentation (i.e. docs are sometimes contradicting each other)
- Signature verification through public key recovery allows some new edge cases. These edge cases depend on how the public key recovery is done. I'm trying to find typical implementations.