0

I am using Active Directory to generate an ECDSA certificate of 256 bits and I need it to have the key encipherment key usage but even as I can see the configuration choosen has that option the certificate doesn't have it. What am I missing?

This is how my key usage tab looks:

enter image description here

But this is how the resulting certificate looks:

enter image description here

I've tried changing the allow encryption data option but the result is the same, is there somewhere else to force this key usage?

Thanks

1 Answer 1

1

In ECC, key encipherment is no longer used for online key encryption (e.g. in TLS), key agreement is used instead.

2
  • Do you know why key agreement is used instead of key encipherment? I haven't been able to find the reason why. Oct 15, 2021 at 1:17
  • 1
    Key agreement is more secure way to protect session keys and include features such as forward secrecy and others.
    – Crypt32
    Oct 15, 2021 at 6:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.