Skip to content

Add lint for checking curve param requirements#1035

Merged
christopher-henderson merged 2 commits into
zmap:masterfrom
digirenpeter:add-ecdsa-curve-lint
Apr 19, 2026
Merged

Add lint for checking curve param requirements#1035
christopher-henderson merged 2 commits into
zmap:masterfrom
digirenpeter:add-ecdsa-curve-lint

Conversation

@digirenpeter

@digirenpeter digirenpeter commented Apr 10, 2026

Copy link
Copy Markdown
Contributor

Added ECDSA curve param lint for CABF CS BR requirement:

6.1.5.2 Code signing Certificate and Timestamp Authority key sizes
For Keys corresponding to Subscriber code signing and Timestamp Authority Certificates:
...
If the Key is ECDSA, then the curve MUST be one of NIST P-256, P-384, or P-521.
...

I decided against adding DSA key lints as well because they're more or less deprecated.

@christopher-henderson christopher-henderson merged commit 31204be into zmap:master Apr 19, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@christopher-henderson christopher-henderson christopher-henderson approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@digirenpeter @christopher-henderson