[FS#786] Please, add support to ecdsa key type

LEDE Bugs lede-bugs at lists.infradead.org
Wed Jul 12 03:40:47 PDT 2017


The following task has a new comment added:

FS#786 - Please, add support to ecdsa key type
User who did this - Baptiste Jonglez (bjonglez)

----------
You can compile dropbear with the ''DROPBEAR_ECC'' option in menuconfig if you want ECDSA support.

However, it adds 23 KB to the dropbear binary on MIPS, so this may be too much to enable it by default.

>From ''package/network/services/dropbear/Config.in'':


config DROPBEAR_ECC
        bool "Elliptic curve cryptography (ECC)"
        default n
        help
                Enables elliptic curve cryptography (ECC) support in key exchange and public key
                authentication.

                Key exchange algorithms:
                  ecdh-sha2-nistp256
                  ecdh-sha2-nistp384
                  ecdh-sha2-nistp521

                Public key algorithms:
                  ecdsa-sha2-nistp256
                  ecdsa-sha2-nistp384
                  ecdsa-sha2-nistp521

                Does not generate ECC host keys by default (ECC key exchange will not be used,
                only ECC public key auth).

                Increases binary size by about 23 kB (MIPS).

----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=786#comment2942



More information about the lede-bugs mailing list