Skip to content

Conversation

@maraino
Copy link
Contributor

@maraino maraino commented Dec 2, 2025

This commit enables the creation of NIST P-384 keys on the Secure Enaclave.

See last section of https://support.apple.com/guide/security/managed-device-attestation-security-sec8a37b4cb2/web

To create a hardware-bound key, the ACME configuration needs to use the ECSECPrimeRandom algorithm
with a key size of 256 or 384 bit. This specifies a key pair on the P-256 or P-384 curves as defined 
in NIST SP 800-186.

This commit enables the creation of NIST P-384 keys on the Secure
Enaclave.
@maraino maraino merged commit cd9e473 into master Dec 2, 2025
15 checks passed
@maraino maraino deleted the mariano/mackms-se branch December 2, 2025 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants