Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:94041
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain snowgarden.ch designates 194.126.200.144 as permitted sender)
To: internals@lists.php.net
References: <57609B96.6080905@snowgarden.ch>
 <CAKws9z1Yk7XmPVnCsXYeMdZXiovK-kDn=UtzkYgs0V+dUa--6g@mail.gmail.com>
Message-ID: <576262B5.4030407@snowgarden.ch>
Date: Thu, 16 Jun 2016 10:26:29 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101
 Thunderbird/38.8.0
MIME-Version: 1.0
In-Reply-To: <CAKws9z1Yk7XmPVnCsXYeMdZXiovK-kDn=UtzkYgs0V+dUa--6g@mail.gmail.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Subject: Re: [PHP-DEV] [OpenSSL] Support for ECC public key generation
From: dol+php@snowgarden.ch (Dominic Luechinger)

On 15/06/16 03:51, Scott Arciszewski wrote:
> While we're at it, can we also add a function to generate (ephemeral)
> Elliptic Curve Diffie-Hellman keys, and then use openssl_dh_compute_key()
> with ECDH keys? Because that would be a lot saner than having to
> shell_exec() to the OpenSSL binary in userland.

Thank you for pointing out ECDH. It makes sense to extend the ECC
support even further.

What do you mean by:
> generate (ephemeral) Elliptic Curve Diffie-Hellman keys

For a ECDH to be ephemeral you could just create a new ECC key pair.
This is now possible with this extension.

As you pointed out the missing part is that openssl_dh_compute_key not
supporting ECC keys. This was requested in the past [1].
If hacked together a proof of concept for openssl_ecdh_compute_key().
I'll push this update to a new branch. I'll send you an update if the
branch is ready for testing.

Regards

Dominic

[1] https://bugs.php.net/bug.php?id=71548