Re: [PATCH v2 1/9] qapi/crypto: Add ECDSA algorithm and curve id

["Daniel P. Berrangé" <berrange@redhat.com>]

On Fri, Aug 21, 2026 at 03:20:38AM +0000, Jamin Lin wrote:
> The ASPEED AST10x0 Secure Boot Controller has a hardware ECDSA engine
> that guest firmware uses to verify secp384r1 signatures. Emulating it
> requires ECDSA support in the crypto akcipher framework, which today
> only implements RSA.
> 
> Introduce a new asymmetric cipher algorithm, ECDSA, a curve identifier
> enum (prime256v1 / NIST P-256 and secp384r1 / NIST P-384) and the
> per-algorithm ECDSA options. This is the QAPI groundwork consumed by the
> crypto akcipher backends in the following patches.
> 
> Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
> Acked-by: Markus Armbruster <armbru@redhat.com>
> ---
>  qapi/crypto.json | 33 +++++++++++++++++++++++++++++++--
>  1 file changed, 31 insertions(+), 2 deletions(-)

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>


With regards,
Daniel
-- 
|: https://berrange.com       ~~        https://hachyderm.io/@berrange :|
|: https://libvirt.org          ~~          https://entangle-photo.org :|
|: https://pixelfed.art/berrange   ~~    https://fstop138.berrange.com :|