Merge pull request #3980 from randombit/jack/deprecate-big-ec-groups

Deprecate creation of application specific groups over 521 bits
randombit · Apr 8, 2024 · 18a775e · 18a775e
2 parents 61b0c7e + b9a7b39
commit 18a775e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/doc/deprecated.rst b/doc/deprecated.rst
@@ -66,6 +66,11 @@ in a future major release.
   None of the builtin groups have composite order, and in the future
   it will be impossible to create composite order EC_Groups.
 
+- Currently it is possible to create an application specific EC_Group
+  with parameters of effectively arbitrary size. In a future release
+  the maximum allowed bitlength of application provided groups will be
+  at most 521 bits.
+
 - Prior to 2.8.0, SM2 algorithms were implemented as two distinct key
   types, one used for encryption and the other for signatures. In 2.8,
   the two types were merged. However it is still possible to refer to