Re[2]: ECDH parameters

2011-07-02 Thread yyy
Thanks for info! So, EC crypto uses standard curves, and temp ECDH parameters consists of choice of one of these curves. After rereading s_server documentation, noticed -named_curve option and it seems to be equivalent to -dhparam option for DH. That explains everything so far. nistp256 is the

Re: ECDH parameters

2011-07-01 Thread Jeffrey Walton
2011/7/1 yyy : > Hello! > > s_server (and probably other TLS servers), requires ECDH parameters, if > using ECDH ciphersuites. (probably similarily as for DH parameters with DH > ciphersuites). > It seems, that these are supposed to be generated using: > ecparam -name 'n

ECDH parameters

2011-07-01 Thread yyy
Hello! s_server (and probably other TLS servers), requires ECDH parameters, if using ECDH ciphersuites. (probably similarily as for DH parameters with DH ciphersuites). It seems, that these are supposed to be generated using: ecparam -name 'name_of_named_curve', but this always gen