Support for EC crypto?

[Cantor, Scott]

On 9/13/15, 5:16 AM, "users on behalf of Stefan Santesson" <users-bounces at shibboleth.net on behalf of stefan at aaa-sec.com> wrote:

>Is there any known limitations of Shibboleth and other major SAML product with regards to algorithm support, in particular EC.

It's never gotten much testing, and zero interest, so I'm not prepared to even speculate much on what might work or not.

The SP's support for it would be dependent on the OpenSSL build. EC support was added I think to xml-security-c 1.7.0 and I'm fairly sure doesn't go back before V2.5.

Don't know about the old IdP. It's in about the same state in V3 as with the SP, largely untested.

I would be surprised if it worked much at all on any other implementations.

-- Scott