Using CC310 to verify an secp128r1 signature

[juliantbrown]

We have a need to verify an secp128r1 ECDSA signature. I see that this is not one of the curves supported by the CC310, but I'm looking into creating the CRYS_ECPKI_Domain_t myself. Most of the members can be easily found as defined by the ECC standard, but there are a few that seem specific to the CC310, such as llfBuff, modSizeInBits, ordSizeInBits, and barrTagSizeInWords.

Has anyone successfully used the CC310 on this curve type? Is it possible?

[Einar Thorsrud]

Hi,

The CC310 does not support secp128r1. I am not sure if it is theoretically possible for the HW to do it (we have not tested), but unfortunately, we cannot share internal details of the CC310 HW or runtime library. I suspect your best option is to use a SW library such as TinyECC.

PS: We do not recommend using secp128r1 as it is not recommended by NIST based on the number of bits of security.

[juliantbrown]

Hi Einar,

Got it. Thanks for the reply. That is what I suspected, but it is good to know for sure.

And understood, we are only using secp128r1 in this case because it is part of a system we are integrating with and we have no option to use a stronger curve. Appreciate your concern.