Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add some words about separating ECDH and ECDSA #5423

Merged
merged 2 commits into from
Aug 24, 2020
Merged

add some words about separating ECDH and ECDSA #5423

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1ddcfbc
add some words about separating ECDH and ECDSA
reaperhulk Aug 24, 2020
41fa76a
Thomas Pornin wrote some good words about why you should try not to mix
reaperhulk Aug 24, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
8 changes: 8 additions & 0 deletions docs/hazmat/primitives/asymmetric/ec.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,10 @@ Elliptic Curve Signature Algorithms
The ECDSA signature algorithm first standardized in NIST publication
`FIPS 186-3`_, and later in `FIPS 186-4`_.

Note that while elliptic curve keys can be used for both signing and key
exchange, this is bad cryptographic practice. Instead, users should
generate separate signing and ECDH keys.

:param algorithm: An instance of
:class:`~cryptography.hazmat.primitives.hashes.HashAlgorithm`.

Expand Down Expand Up @@ -254,6 +258,10 @@ Elliptic Curve Key Exchange algorithm
key, derivation of multiple keys, and destroys any structure that may be
present.

Note that while elliptic curve keys can be used for both signing and key
exchange, this is bad cryptographic practice. Instead, users should
generate separate signing and ECDH keys.

.. warning::

This example does not give `forward secrecy`_ and is only provided as a
Expand Down