X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=doc%2Fapps%2Fec.pod;h=758709f081dd5c0fc3595a041c6691198a6a398e;hp=ebc49ea092327e0c1b4e6b8b1b780eea7d3f7145;hb=c4fbed6c3139726fc719a703d2195f3b6426b748;hpb=9b86974e0c705ea321ddbc9a9d8562c894809e5b diff --git a/doc/apps/ec.pod b/doc/apps/ec.pod index ebc49ea092..758709f081 100644 --- a/doc/apps/ec.pod +++ b/doc/apps/ec.pod @@ -7,6 +7,7 @@ ec - EC key processing =head1 SYNOPSIS B B +[B<-help>] [B<-inform PEM|DER>] [B<-outform PEM|DER>] [B<-in filename>] @@ -23,20 +24,26 @@ B B [B<-pubout>] [B<-conv_form arg>] [B<-param_enc arg>] +[B<-no_public>] +[B<-check>] [B<-engine id>] =head1 DESCRIPTION The B command processes EC keys. They can be converted between various -forms and their components printed out. B OpenSSL uses the +forms and their components printed out. B OpenSSL uses the private key format specified in 'SEC 1: Elliptic Curve Cryptography' -(http://www.secg.org/). To convert a OpenSSL EC private key into the +(http://www.secg.org/). To convert an OpenSSL EC private key into the PKCS#8 private key format use the B command. =head1 COMMAND OPTIONS =over 4 +=item B<-help> + +Print out a usage message. + =item B<-inform DER|PEM> This specifies the input format. The B option with a private key uses @@ -48,7 +55,7 @@ PKCS#8 format is also accepted. =item B<-outform DER|PEM> -This specifies the output format, the options have the same meaning as the +This specifies the output format, the options have the same meaning as the B<-inform> option. =item B<-in filename> @@ -76,7 +83,7 @@ see the B section in L. =item B<-des|-des3|-idea> -These options encrypt the private key with the DES, triple DES, IDEA or +These options encrypt the private key with the DES, triple DES, IDEA or any other cipher supported by OpenSSL before outputting it. A pass phrase is prompted for. If none of these options is specified the key is written in plain text. This @@ -122,12 +129,20 @@ the preprocessor macro B at compile time. This specifies how the elliptic curve parameters are encoded. Possible value are: B, i.e. the ec parameters are -specified by a OID, or B where the ec parameters are -explicitly given (see RFC 3279 for the definition of the +specified by an OID, or B where the ec parameters are +explicitly given (see RFC 3279 for the definition of the EC parameters structures). The default value is B. -B the B alternative ,as specified in RFC 3279, +B the B alternative, as specified in RFC 3279, is currently not implemented in OpenSSL. +=item B<-no_public> + +This option omits the public key components from the private key output. + +=item B<-check> + +this option checks the consistency of an EC private or public key. + =item B<-engine id> specifying an engine (by its unique B string) will cause B @@ -155,7 +170,7 @@ To encrypt a private key using triple DES: openssl ec -in key.pem -des3 -out keyout.pem -To convert a private key from PEM to DER format: +To convert a private key from PEM to DER format: openssl ec -in key.pem -outform DER -out keyout.der @@ -179,12 +194,13 @@ To change the point conversion form to B: L, L, L -=head1 HISTORY - -The ec command was first introduced in OpenSSL 0.9.8. +=head1 COPYRIGHT -=head1 AUTHOR +Copyright 2003-2016 The OpenSSL Project Authors. All Rights Reserved. -Nils Larsch for the OpenSSL project (http://www.openssl.org). +Licensed under the OpenSSL license (the "License"). You may not use +this file except in compliance with the License. You can obtain a copy +in the file LICENSE in the source distribution or at +L. =cut