ECC Support

[cschram]

It would be nice to have elliptical curve support - are there any current plans to support this?

[dlongley]

We'd like to see ECC support get added to forge. We (Digital Bazaar) haven't had any spare cycles to implement it yet but a good-looking PR would be accepted. There are a number of gotchas that need to be avoided such as patent issues and the trustworthiness of the constants involved. OpenSSL's implementation apparently avoids any patents -- I don't know if Tom Wu's has been checked for that. Bruce Schneier has some trust issues with ECC.

[cschram]

I see. I'd try and work on it myself, but I think I need considerably more in depth knowledge on it before I make any attempt. :)

We're wanting to use ECC for one of our products at work, but the web app is the bottle neck there as there aren't any adequate JavaScript implementations right now. Perhaps we should just stick with RSA if there are trust issues.

[jduncanator]

@abjorn The trust issues are really in the math. You have to be trusting "curves" that are being created by third-parties. With RSA the math is math, there are no constants, you generate keys on both sides so there really is no room for backdooring. I'll see if I can whip up a ECC implementation considering I'm pretty versed in the math behind it.

[mitar]

+1 for ECDSA.

[beastybeast]

Try to work together with https://github.com/indutny/elliptic as I currently use both systems together anyway and they work nicely together!

[raonadeem]

jsbn 1.4 have a support for ECC and RSA. When do you have plan to integrate jsbn 1.4 with forge or any guide lines for TLS support with ECC? I saw this in #203 roadmap.

[sigma67]

Please consider this, many applications are moving to ECDSA in 2020.

[hamano]

I did it:
#925

[lapo-luchini]

And now, for the "other" elliptic curve crypto which is independent from NIST curves… (EdDSA) 😇
(just kidding, kudos for the patch, that'd be nice but much less in use in the PKI at the moment, even if I hope it will be soon enough)