SPRUJB6B November 2024 – May 2025 AM2612
This command generates an ECDSA public key from its private key. The ECDSA_KEYGEN command takes a private key in the additively DPA-blinded format that is the output of ECC_KEY_BLIND.
| Slot | Name | Description | In ROM? |
|---|---|---|---|
| 3 | s0 | First component of blinded private key. | No |
| 4 | s1 | Second component of blinded private key. | No |
| 10 | b | b-coefficient of the elliptic curve | Yes |
| 11 | gx | x-coordinate of the elliptic curve’s generator | Yes |
| 12 | gy | y-coordinate of the elliptic curve’s generator | Yes |
| 13 | q | Order of the subgroup generated by (gx,gy). Must be odd. | Yes |
| 14 | p | Order of the finite field underlying the elliptic curve if it is not a supported special modulus. | Yes |
| 15 | A | a-coefficient of the elliptic curve | Yes |
The ECDSA_KEYGEN command will raise an error if:
On error, this command clears slots 1 through 12. On success, it clears slots 1,2 and 5 through 10.
| Slot | Name | Description |
|---|---|---|
| 3 | s0 | First component of the private key, reblinded |
| 4 | s1 | Second component of the private key, reblinded. |
| 11 | px | x-coordinate of the generated public key |
| 12 | py | y-coordinate of the generated public key |