OpenSSL missing NIST p224r1

[Orion Poplawski]

On 01/09/2015 09:57 AM, Nathaniel McCallum wrote:
> On Fedora 21, OpenSSL doesn't appear to support NIST p224r1, but *does*
> support other NIST curves. I presume this was intentional, but I'm not
> sure why. Can someone enlighten me?
> 
> $ openssl ecparam -list_curves
>   secp384r1 : NIST/SECG curve over a 384 bit prime field
>   secp521r1 : NIST/SECG curve over a 521 bit prime field
>   prime256v1: X9.62/SECG curve over a 256 bit prime field
> 
> Nathaniel
> 

Individual curves must be considered by Fedora Legal on a case by case basis

see e.g.:

https://bugzilla.redhat.com/show_bug.cgi?id=1067697
https://bugzilla.redhat.com/show_bug.cgi?id=1021898

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion at nwra.com
Boulder, CO 80301                   http://www.nwra.com