1
$\begingroup$

We've been asked to generate a certificate signing request using elliptic curve and we can't use any third-party library as it's an embedded application with very limited resources).

We are used to generating CSR using RSA, but we can't find any documentation on how to do that with an elliptic curve; specifically, which data to use for the signing part. Studying OpenSSL-generated CSR it looks like there are multiple signatures generated, or a hash of some kind, but we don't know. And OpenSSL source code is quite difficult to read when you're not used to it.

Can anyone point us in the right direction?

|improve this question
$\endgroup$

closed as unclear what you're asking by forest, kelalaka, Maeher, Maarten Bodewes♦ Jul 28 at 8:51

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • $\begingroup$ A PKCS10 CSR definitely contains exactly one signature in all cases, and OpenSSL correctly does that in all cases. ECDSA signing does involve a hash internally but it is not visible in the signature, and exactly the same is true for RSA. Maybe you could be more specific about what is confusing you. Do you have an implementation of ECDSA, or more generally ECC? If not, doing it 'from scratch' is going to be a fair bit of work. If you can do RSA, presumably you at least have multiprecision aka bignum arithmetic. $\endgroup$ – dave_thompson_085 Jul 25 at 8:08
1
$\begingroup$

It should be pretty much the same. If you can sign a CSR with RSA you can sign with ECC. The exact same data is signed, what changes is:

  • The signature algorithm should be the right OID (e.g. ecdsaWithSHA256)
  • The signature value must be the ECDSA signature encoded as specified in SEC (i.e. an ASN.1 sequence of the two integers in the signature)
  • The public key value must a SubjectPublicKeyInfo structure with values specified in RFC5480: the algorithm field is an AlgorithmIdentifier whose algorithm field is the OID id-ecPublicKey and whose parameters field is the OID of the curve used. Finally, the subjectPublicKey field in SubjectPublicKeyInfo is the public key encoded as specified by SEC section 2.3.3.
|improve this answer
$\endgroup$

Not the answer you're looking for? Browse other questions tagged or ask your own question.