Elliptic Curve Cryptography Key Management

Structure holding information on a specific curve.

Note

This structure cannot be used to create a new variable. Only the variables defined by this library can be used, e.g. g_nrf_crypto_ecc_secp256r1_curve_info .

Defines type of ECC curve.

Inverts byte order of a big integers contained in a raw data.

All the ECC API accepts only data with big endian integers, so this function have to be used if little endian is required. If input is in little endian byte order it will be converted to big endian. If input is in big endian byte order it will be converted to little endian. It works for ECC raw private key, raw public key, signature and shared secret. If raw data contains two big integers (e.g. R, S, or X, Y) each integer is inverted separately. If p_curve_info is NULL then all bytes in buffer will be inverted regardless what is the content of the buffer.

Parameters

[in]	p_curve_info	Pointer to information on selected curve. Use only global variables defined by nrf_crypto, e.g. g_nrf_crypto_ecc_secp256r1_curve_info .
[in]	p_raw_input	Pointer to buffer holding source data.
[out]	p_raw_output	Pointer to buffer that will be filled with inverted byte order. This parameter can be the same as p_raw_input , otherwise the buffers cannot overlap.
[in]	raw_data_size	Size of input and output buffer.

Gets curve information structure from provided key (private or public).

Parameters

[in]	p_key	Pointer to structure holding private or public key.
[out]	pp_curve_info	Pointer to location where put retrieved pointer to curve information structure.

Generate a new pair of a public key and a private key.

Generated keys have to deallocated using nrf_crypto_ecc_private_key_free and nrf_crypto_ecc_public_key_free .

Parameters

[in]	p_context	Pointer to temporary structure holding context information. If it is NULL, necessary data will be allocated with NRF_CRYPTO_ALLOC and freed at the end of the function.
[in]	p_curve_info	Pointer to information on selected curve. Use only global variables defined by nrf_crypto, e.g. g_nrf_crypto_ecc_secp256r1_curve_info .
[out]	p_private_key	Pointer to structure where newly generated private key will be put.
[out]	p_public_key	Pointer to structure where newly generated public key will be put.

Release resources taken by a private key.

Parameters

[in]

p_private_key

Pointer to structure holding private key to release.

Create a private key from a raw data.

Generated private key has to be deallocated using nrf_crypto_ecc_private_key_free .

Parameters

[in]	p_curve_info	Pointer to information on selected curve. Use only global variables defined by nrf_crypto, e.g. g_nrf_crypto_ecc_secp256r1_curve_info .
[out]	p_private_key	Pointer to structure where newly converted private key will be put.
[in]	p_raw_data	Pointer to buffer containing a big endian raw data.
[in]	raw_data_size	Number of bytes of a raw data. Correct size for selected curve can be found in p_curve_info and it is also defined by the preprocessor definitions, e.g. NRF_CRYPTO_ECC_SECP256R1_RAW_PRIVATE_KEY_SIZE .

Convert a private key to a raw data.

Parameters

[in]	p_private_key	Pointer to structure holding private key that will be convert.
[out]	p_raw_data	Pointer to buffer containing a big endian raw data.
[in,out]	p_raw_data_size	Maximum number of bytes that p_raw_data buffer can hold on input and the actual number of bytes used by the raw data on output. Actual size for selected curve can be found in nrf_crypto_ecc_curve_info_t and it is also defined by the preprocessor definitions, e.g. NRF_CRYPTO_ECC_SECP256R1_RAW_PRIVATE_KEY_SIZE .

Calculate public key associated with provided private key.

Calculated public key has to be deallocated using nrf_crypto_ecc_public_key_free .

Parameters

[in]	p_context	Pointer to temporary structure holding context information. If it is NULL, necessary data will be allocated with NRF_CRYPTO_ALLOC and freed at the end of the function.
[in]	p_private_key	Pointer to structure holding a private key that will be used for computation.
[out]	p_public_key	Pointer to structure where newly generated public key will be put.

Release resources taken by a public key.

Parameters

[in]

p_public_key

Pointer to structure holding public key to release.

Create a public key from a raw data.

Generated public key has to be deallocated using nrf_crypto_ecc_public_key_free .

Parameters

[in]	p_curve_info	Pointer to information on selected curve. Use only global variables defined by nrf_crypto, e.g. g_nrf_crypto_ecc_secp256r1_curve_info .
[out]	p_public_key	Pointer to structure where newly converted public key will be put.
[in]	p_raw_data	Pointer to buffer containing a big endian raw data.
[in]	raw_data_size	Number of bytes of a raw data. Correct size for selected curve can be found in p_curve_info and it is also defined by the preprocessor definitions, e.g. NRF_CRYPTO_ECC_SECP256R1_RAW_PUBLIC_KEY_SIZE .

Convert a public key to a raw data.

Parameters

[in]	p_public_key	Pointer to structure holding public key that will be convert.
[out]	p_raw_data	Pointer to buffer containing a big endian raw data.
[in,out]	p_raw_data_size	Maximum number of bytes that p_raw_data buffer can hold on input and the actual number of bytes used by the raw data on output. Actual size for selected curve can be found in nrf_crypto_ecc_curve_info_t and it is also defined by the preprocessor definitions, e.g. NRF_CRYPTO_ECC_SECP256R1_RAW_PUBLIC_KEY_SIZE .