From c4a13b424b926247a4892026762c005869e20aa2 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Thu, 25 Jun 2015 22:17:28 +0300 Subject: [PATCH] OpenSSL: Add support for Brainpool Elliptic Curves This allows the IKE groups 27-30 (RFC 6932) to be used with OpenSSL 1.0.2 and newer. For now, these get enabled for SAE as configurable groups (sae_groups parameter), but the new groups are not enabled by default. Signed-off-by: Jouni Malinen --- src/crypto/crypto_openssl.c | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/src/crypto/crypto_openssl.c b/src/crypto/crypto_openssl.c index 33e3c4fd9..dbe812c65 100644 --- a/src/crypto/crypto_openssl.c +++ b/src/crypto/crypto_openssl.c @@ -1138,6 +1138,26 @@ struct crypto_ec * crypto_ec_init(int group) case 26: nid = NID_secp224r1; break; +#ifdef NID_brainpoolP224r1 + case 27: + nid = NID_brainpoolP224r1; + break; +#endif /* NID_brainpoolP224r1 */ +#ifdef NID_brainpoolP256r1 + case 28: + nid = NID_brainpoolP256r1; + break; +#endif /* NID_brainpoolP256r1 */ +#ifdef NID_brainpoolP384r1 + case 29: + nid = NID_brainpoolP384r1; + break; +#endif /* NID_brainpoolP384r1 */ +#ifdef NID_brainpoolP512r1 + case 30: + nid = NID_brainpoolP512r1; + break; +#endif /* NID_brainpoolP512r1 */ default: return NULL; }