Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support additional elliptic curves #881

Closed
strantalis opened this issue May 28, 2024 · 2 comments · May be fixed by #883
Closed

support additional elliptic curves #881

strantalis opened this issue May 28, 2024 · 2 comments · May be fixed by #883
Assignees
Labels
comp:kas Key Access Server comp:sdk A software development kit, including library, for client applications and inter-service communicati Stale

Comments

@strantalis
Copy link
Member

We need to support additional elliptic curves in kas and the sdk. Specifically P384 but should be designed in a way to support others as well.

https://pkg.go.dev/crypto/elliptic#Curve

@strantalis strantalis added comp:sdk A software development kit, including library, for client applications and inter-service communicati comp:kas Key Access Server labels May 28, 2024
@pflynn-virtru
Copy link
Member

No Elliptic Curves less than 256-bits are supported

https://github.com/opentdf/spec/tree/main/schema/nanotdf#31-assumptions

@pflynn-virtru
Copy link
Member

Is only one key active at a time? meaning P-384 is the only active key that is served from kas_public_key endpoint?
Or are all curves active, and the SDK client can use any for its use case?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
comp:kas Key Access Server comp:sdk A software development kit, including library, for client applications and inter-service communicati Stale
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants