codespool/generate_EC_keypar.md

## generate_EC_keypar.md

      
    Raw
  

              generate_EC_keypar.md
            
          
    Private key:

openssl ecparam -name $CURVE -genkey -noout -out private.ec.key
where $CURVE is:

prime256v1 for ES256
secp384r1 for ES384
secp521r1 for ES512

Public key:

openssl ec -in private.ec.key -pubout -out public.pem#
Aside: RS256 key:

ssh-keygen -t rsa -b 4096 -E SHA256 -m PEM -P "" -f RS256.key
openssl rsa -in RS256.key -pubout -outform PEM -out RS256.key.pub
*(first line creates openssh format keys, second converts them to RSA)