Inicio Explorar Axuda
Iniciar sesión
dream
/
Android_verify
1
1
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Árbore: 02bb4a76f0
Ramas Etiquetas
Android_verify
/
third_party
/
android-libs
/
share
/
doc
/
openssl
/
html
/
man1
/
openssl-ecparam.html

openssl-ecparam.html 8.0 KB
Histórico Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214 
  1. <?xml version="1.0" ?>
    2. 

  2. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
    3. 

  3. <html xmlns="http://www.w3.org/1999/xhtml">
    4. 

  4. <head>
    5. 

  5. <title>openssl-ecparam</title>
    6. 

  6. <meta http-equiv="content-type" content="text/html; charset=utf-8" />
    7. 

  7. <link rev="made" href="mailto:root@localhost" />
    8. 

  8. </head>
    9. 

  9. 

  10. <body>
    11. 

  11. 

  12. 

  13. 

  14. <ul id="index">
    15. 

  15.   <li><a href="#NAME">NAME</a></li>
    16. 

  16.   <li><a href="#SYNOPSIS">SYNOPSIS</a></li>
    17. 

  17.   <li><a href="#DESCRIPTION">DESCRIPTION</a></li>
    18. 

  18.   <li><a href="#OPTIONS">OPTIONS</a></li>
    19. 

  19.   <li><a href="#EXAMPLES">EXAMPLES</a></li>
    20. 

  20.   <li><a href="#SEE-ALSO">SEE ALSO</a></li>
    21. 

  21.   <li><a href="#HISTORY">HISTORY</a></li>
    22. 

  22.   <li><a href="#COPYRIGHT">COPYRIGHT</a></li>
    23. 

  23. </ul>
    24. 

  24. 

  25. <h1 id="NAME">NAME</h1>
    26. 

  26. 

  27. <p>openssl-ecparam - EC parameter manipulation and generation</p>
    28. 

  28. 

  29. <h1 id="SYNOPSIS">SYNOPSIS</h1>
    30. 

  30. 

  31. <p><b>openssl ecparam</b> [<b>-help</b>] [<b>-inform</b> <b>DER</b>|<b>PEM</b>] [<b>-outform</b> <b>DER</b>|<b>PEM</b>] [<b>-in</b> <i>filename</i>] [<b>-out</b> <i>filename</i>] [<b>-noout</b>] [<b>-text</b>] [<b>-check</b>] [<b>-check_named</b>] [<b>-name</b> <i>arg</i>] [<b>-list_curves</b>] [<b>-conv_form</b> <i>arg</i>] [<b>-param_enc</b> <i>arg</i>] [<b>-no_seed</b>] [<b>-genkey</b>] [<b>-engine</b> <i>id</i>] [<b>-rand</b> <i>files</i>] [<b>-writerand</b> <i>file</i>] [<b>-provider</b> <i>name</i>] [<b>-provider-path</b> <i>path</i>] [<b>-propquery</b> <i>propq</i>]</p>
    32. 

  32. 

  33. <h1 id="DESCRIPTION">DESCRIPTION</h1>
    34. 

  34. 

  35. <p>This command is used to manipulate or generate EC parameter files.</p>
    36. 

  36. 

  37. <p>OpenSSL is currently not able to generate new groups and therefore this command can only create EC parameters from known (named) curves.</p>
    38. 

  38. 

  39. <h1 id="OPTIONS">OPTIONS</h1>
    40. 

  40. 

  41. <dl>
    42. 

  42. 

  43. <dt id="help"><b>-help</b></dt>
    44. 

  44. <dd>
    45. 

  45. 

  46. <p>Print out a usage message.</p>
    47. 

  47. 

  48. </dd>
    49. 

  49. <dt id="inform-DER-PEM"><b>-inform</b> <b>DER</b>|<b>PEM</b></dt>
    50. 

  50. <dd>
    51. 

  51. 

  52. <p>The EC parameters input format; unspecified by default. See <a href="../man1/openssl-format-options.html">openssl-format-options(1)</a> for details.</p>
    53. 

  53. 

  54. </dd>
    55. 

  55. <dt id="outform-DER-PEM"><b>-outform</b> <b>DER</b>|<b>PEM</b></dt>
    56. 

  56. <dd>
    57. 

  57. 

  58. <p>The EC parameters output format; the default is <b>PEM</b>. See <a href="../man1/openssl-format-options.html">openssl-format-options(1)</a> for details.</p>
    59. 

  59. 

  60. <p>Parameters are encoded as <b>EcpkParameters</b> as specified in IETF RFC 3279.</p>
    61. 

  61. 

  62. </dd>
    63. 

  63. <dt id="in-filename"><b>-in</b> <i>filename</i></dt>
    64. 

  64. <dd>
    65. 

  65. 

  66. <p>This specifies the input filename to read parameters from or standard input if this option is not specified.</p>
    67. 

  67. 

  68. </dd>
    69. 

  69. <dt id="out-filename"><b>-out</b> <i>filename</i></dt>
    70. 

  70. <dd>
    71. 

  71. 

  72. <p>This specifies the output filename parameters to. Standard output is used if this option is not present. The output filename should <b>not</b> be the same as the input filename.</p>
    73. 

  73. 

  74. </dd>
    75. 

  75. <dt id="noout"><b>-noout</b></dt>
    76. 

  76. <dd>
    77. 

  77. 

  78. <p>This option inhibits the output of the encoded version of the parameters.</p>
    79. 

  79. 

  80. </dd>
    81. 

  81. <dt id="text"><b>-text</b></dt>
    82. 

  82. <dd>
    83. 

  83. 

  84. <p>This option prints out the EC parameters in human readable form.</p>
    85. 

  85. 

  86. </dd>
    87. 

  87. <dt id="check"><b>-check</b></dt>
    88. 

  88. <dd>
    89. 

  89. 

  90. <p>Validate the elliptic curve parameters.</p>
    91. 

  91. 

  92. </dd>
    93. 

  93. <dt id="check_named"><b>-check_named</b></dt>
    94. 

  94. <dd>
    95. 

  95. 

  96. <p>Validate the elliptic name curve parameters by checking if the curve parameters match any built-in curves.</p>
    97. 

  97. 

  98. </dd>
    99. 

  99. <dt id="name-arg"><b>-name</b> <i>arg</i></dt>
    100. 

  100. <dd>
    101. 

  101. 

  102. <p>Use the EC parameters with the specified &#39;short&#39; name. Use <b>-list_curves</b> to get a list of all currently implemented EC parameters.</p>
    103. 

  103. 

  104. </dd>
    105. 

  105. <dt id="list_curves"><b>-list_curves</b></dt>
    106. 

  106. <dd>
    107. 

  107. 

  108. <p>Print out a list of all currently implemented EC parameters names and exit.</p>
    109. 

  109. 

  110. </dd>
    111. 

  111. <dt id="conv_form-arg"><b>-conv_form</b> <i>arg</i></dt>
    112. 

  112. <dd>
    113. 

  113. 

  114. <p>This specifies how the points on the elliptic curve are converted into octet strings. Possible values are: <b>compressed</b>, <b>uncompressed</b> (the default value) and <b>hybrid</b>. For more information regarding the point conversion forms please read the X9.62 standard. <b>Note</b> Due to patent issues the <b>compressed</b> option is disabled by default for binary curves and can be enabled by defining the preprocessor macro <b>OPENSSL_EC_BIN_PT_COMP</b> at compile time.</p>
    115. 

  115. 

  116. </dd>
    117. 

  117. <dt id="param_enc-arg"><b>-param_enc</b> <i>arg</i></dt>
    118. 

  118. <dd>
    119. 

  119. 

  120. <p>This specifies how the elliptic curve parameters are encoded. Possible value are: <b>named_curve</b>, i.e. the ec parameters are specified by an OID, or <b>explicit</b> where the ec parameters are explicitly given (see RFC 3279 for the definition of the EC parameters structures). The default value is <b>named_curve</b>. <b>Note</b> the <b>implicitlyCA</b> alternative, as specified in RFC 3279, is currently not implemented in OpenSSL.</p>
    121. 

  121. 

  122. </dd>
    123. 

  123. <dt id="no_seed"><b>-no_seed</b></dt>
    124. 

  124. <dd>
    125. 

  125. 

  126. <p>This option inhibits that the &#39;seed&#39; for the parameter generation is included in the ECParameters structure (see RFC 3279).</p>
    127. 

  127. 

  128. </dd>
    129. 

  129. <dt id="genkey"><b>-genkey</b></dt>
    130. 

  130. <dd>
    131. 

  131. 

  132. <p>This option will generate an EC private key using the specified parameters.</p>
    133. 

  133. 

  134. </dd>
    135. 

  135. <dt id="engine-id"><b>-engine</b> <i>id</i></dt>
    136. 

  136. <dd>
    137. 

  137. 

  138. <p>See <a href="../man1/openssl.html">&quot;Engine Options&quot; in openssl(1)</a>. This option is deprecated.</p>
    139. 

  139. 

  140. </dd>
    141. 

  141. <dt id="rand-files--writerand-file"><b>-rand</b> <i>files</i>, <b>-writerand</b> <i>file</i></dt>
    142. 

  142. <dd>
    143. 

  143. 

  144. <p>See <a href="../man1/openssl.html">&quot;Random State Options&quot; in openssl(1)</a> for details.</p>
    145. 

  145. 

  146. </dd>
    147. 

  147. <dt id="provider-name"><b>-provider</b> <i>name</i></dt>
    148. 

  148. <dd>
    149. 

  149. 

  150. </dd>
    151. 

  151. <dt id="provider-path-path"><b>-provider-path</b> <i>path</i></dt>
    152. 

  152. <dd>
    153. 

  153. 

  154. </dd>
    155. 

  155. <dt id="propquery-propq"><b>-propquery</b> <i>propq</i></dt>
    156. 

  156. <dd>
    157. 

  157. 

  158. <p>See <a href="../man1/openssl.html">&quot;Provider Options&quot; in openssl(1)</a>, <a href="../man7/provider.html">provider(7)</a>, and <a href="../man7/property.html">property(7)</a>.</p>
    159. 

  159. 

  160. </dd>
    161. 

  161. </dl>
    162. 

  162. 

  163. <p>The <a href="../man1/openssl-genpkey.html">openssl-genpkey(1)</a> and <a href="../man1/openssl-pkeyparam.html">openssl-pkeyparam(1)</a> commands are capable of performing all the operations this command can, as well as supporting other public key types.</p>
    164. 

  164. 

  165. <h1 id="EXAMPLES">EXAMPLES</h1>
    166. 

  166. 

  167. <p>The documentation for the <a href="../man1/openssl-genpkey.html">openssl-genpkey(1)</a> and <a href="../man1/openssl-pkeyparam.html">openssl-pkeyparam(1)</a> commands contains examples equivalent to the ones listed here.</p>
    168. 

  168. 

  169. <p>To create EC parameters with the group &#39;prime192v1&#39;:</p>
    170. 

  170. 

  171. <pre><code>openssl ecparam -out ec_param.pem -name prime192v1</code></pre>
    172. 

  172. 

  173. <p>To create EC parameters with explicit parameters:</p>
    174. 

  174. 

  175. <pre><code>openssl ecparam -out ec_param.pem -name prime192v1 -param_enc explicit</code></pre>
    176. 

  176. 

  177. <p>To validate given EC parameters:</p>
    178. 

  178. 

  179. <pre><code>openssl ecparam -in ec_param.pem -check</code></pre>
    180. 

  180. 

  181. <p>To create EC parameters and a private key:</p>
    182. 

  182. 

  183. <pre><code>openssl ecparam -out ec_key.pem -name prime192v1 -genkey</code></pre>
    184. 

  184. 

  185. <p>To change the point encoding to &#39;compressed&#39;:</p>
    186. 

  186. 

  187. <pre><code>openssl ecparam -in ec_in.pem -out ec_out.pem -conv_form compressed</code></pre>
    188. 

  188. 

  189. <p>To print out the EC parameters to standard output:</p>
    190. 

  190. 

  191. <pre><code>openssl ecparam -in ec_param.pem -noout -text</code></pre>
    192. 

  192. 

  193. <h1 id="SEE-ALSO">SEE ALSO</h1>
    194. 

  194. 

  195. <p><a href="../man1/openssl.html">openssl(1)</a>, <a href="../man1/openssl-pkeyparam.html">openssl-pkeyparam(1)</a>, <a href="../man1/openssl-genpkey.html">openssl-genpkey(1)</a>, <a href="../man1/openssl-ec.html">openssl-ec(1)</a>, <a href="../man1/openssl-dsaparam.html">openssl-dsaparam(1)</a></p>
    196. 

  196. 

  197. <h1 id="HISTORY">HISTORY</h1>
    198. 

  198. 

  199. <p>The <b>-engine</b> option was deprecated in OpenSSL 3.0.</p>
    200. 

  200. 

  201. <p>The <b>-C</b> option was removed in OpenSSL 3.0.</p>
    202. 

  202. 

  203. <h1 id="COPYRIGHT">COPYRIGHT</h1>
    204. 

  204. 

  205. <p>Copyright 2003-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
    206. 

  206. 

  207. <p>Licensed under the Apache License 2.0 (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
    208. 

  208. 

  209. 

  210. </body>
    211. 

  211. 

  212. </html>
    213. 

  213. 

  214.