Re: [pkcs11] PKCS#11 and EdDSA

[Robert Relyea <rrelyea@redhat.com>]

On 01/19/2020 02:02 PM, Jakub Jelen wrote:
> Hello all,
>
> I started looking through the EdDSA usage in the OpenGPG card/Gnuk [1]
> in contrast with the new PKCS#11 3.0. If I read both right, the
> signature can be implemented with CKM_EDDSA mechanism, but what I miss
> is any algorithm that could be used for the encryption/decryption
> counterpart (which is quite crucial in GPG).
ED curves can be used with CKM_ECDH to do key exchange (like other EC 
curves). Only the Signature had a different mechanism.

The CKM_ECDH was already available in 2.40 for ED curves IIRC.

bob
> Is this something that is missing from the 3.0 specs (and probably
> material for 3.1?) or is that something that I miss with my (still
> quite limited) knowledge of elliptic curves in general?
>
> [1] https://wiki.gnupg.org/ECC
>
> Regards,