oauth2.dev

P-384

IESG

Registry Context

P-384 is a case-sensitive `crv` value defined by RFC 7518 for elliptic curve JSON Web Keys. Its initial IANA registry entry lists its JOSE implementation requirement as Optional.

Technical Summary

RFC 7518 defines `P-384` as one of three cryptographic curve identifiers used by the specification and registers it in the JSON Web Key Elliptic Curve registry. Public JWKs using this curve contain `crv`, `x`, and `y` members with full-size coordinate values.

When Used

Use `P-384` as the `crv` value when representing an elliptic curve JWK whose key uses the P-384 curve.

Normative Requirements

Elliptic Curve public JWKs using `P-384`

MUST
2

  1. RFC 7518 - Section 6.2.1

    include the `crv` and `x` members.

    The following members MUST be present for all Elliptic Curve public keys: "crv", "x"

  2. RFC 7518 - Section 6.2.1

    include the `y` member.

    Condition: because `P-384` is one of the three curves defined in Section 6.2.1.1

    The following member MUST also be present ... for the three curves defined in the following section: "y"

The octet string represented by the `x` parameter

MUST
1

  1. RFC 7518 - Section 6.2.1.2

    have the full coordinate size for P-384.

    Condition: when `crv` is `P-384`

    The length of this octet string MUST be the full size of a coordinate for the curve specified in the "crv" parameter.

The octet string represented by the `y` parameter

MUST
1

  1. RFC 7518 - Section 6.2.1.3

    have the full coordinate size for P-384.

    Condition: when `crv` is `P-384`

    The length of this octet string MUST be the full size of a coordinate for the curve specified in the "crv" parameter.

Validation Guidance

error

Reject an EC public JWK using `crv`=`P-384` if `crv`, `x`, or `y` is missing.

error

Reject an EC public JWK using `crv`=`P-384` if the octet string represented by `x` or `y` is not the full coordinate size for P-384.

error

Treat `P-384` as case-sensitive; differently cased strings do not identify this registered curve value.

error

Reject SEC1 point-compressed representations for `P-384`, because RFC 7518 does not support point compression for this curve.

Reference

RFC7518 - Section 6.2.1.1

Details

Entry Id
P-384
Curve Name
P-384
Curve Description
P-384 Curve
Jose Implementation Requirements
Optional
Change Controller
IESG
Reference
RFC7518 - Section 6.2.1.1