From 460f64cd7d3b4606ff4ce5e62be7888108093959 Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Fri, 10 Oct 2025 16:41:53 +0200
Subject: [PATCH 1/7] data_files: add EC secp256r1 private key data files in
 SEC1 format

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/Makefile                 |  13 +++++++++++++
 data_files/ec_256_prv.sec1.comp.pem |   4 ++++
 data_files/ec_256_prv.sec1.der      | Bin 0 -> 121 bytes
 data_files/ec_256_prv.sec1.pem      |   5 +++++
 4 files changed, 22 insertions(+)
 create mode 100644 data_files/ec_256_prv.sec1.comp.pem
 create mode 100644 data_files/ec_256_prv.sec1.der
 create mode 100644 data_files/ec_256_prv.sec1.pem

diff --git a/data_files/Makefile b/data_files/Makefile
index 142d3ab09..ce161dcae 100644
--- a/data_files/Makefile
+++ b/data_files/Makefile
@@ -1839,6 +1839,19 @@ ec_prv.sec1.der: ec_prv.sec1.pem
 	$(OPENSSL) pkey -in $< -out $@ -outform DER
 all_final += ec_prv.sec1.der
 
+ec_256_prv.sec1.der:
+	$(OPENSSL) ecparam -name prime256v1 -genkey -outform DER -noout -out $@
+all_final += ec_256_prv.sec1.der
+
+ec_256_prv.sec1.pem:
+	$(OPENSSL) ec -in $< -out $@ -outform PEM
+all_final += ec_256_prv.sec1.pem
+
+ec_256_prv.sec1.comp.pem:
+	$(OPENSSL) ec -in $< -out $@ -outform PEM
+	$(OPENSSL) ec -in $< -conv_form compressed -outform PEM -out $@
+all_final += ec_256_prv.sec1.pem
+
 ec_256_long_prv.der: ec_256_long_prv.pem
 	$(OPENSSL) pkey -in $< -out $@ -outform DER
 all_final += ec_256_long_prv.der
diff --git a/data_files/ec_256_prv.sec1.comp.pem b/data_files/ec_256_prv.sec1.comp.pem
new file mode 100644
index 000000000..86bfed8d0
--- /dev/null
+++ b/data_files/ec_256_prv.sec1.comp.pem
@@ -0,0 +1,4 @@
+-----BEGIN EC PRIVATE KEY-----
+MFcCAQEEIHnN8ULAX3r6RNctg8/Hfll6p/QgJXJ6Y4XgsLeJbWV8oAoGCCqGSM49
+AwEHoSQDIgACCEh3UFIe6UZVzKk6zmLN74VtxjvoVZYxs4WckNUPGSY=
+-----END EC PRIVATE KEY-----
diff --git a/data_files/ec_256_prv.sec1.der b/data_files/ec_256_prv.sec1.der
new file mode 100644
index 0000000000000000000000000000000000000000..e1da3985b4799d5e3a0d36b8a6fe4b436453d0c5
GIT binary patch
literal 121
zcmV-<0EYiCcLD(c1R#0M@j}2~diq4yErZX;epz~_^dKd2dSiv)u(yeAWqhCt1_&yK
zNX|V20SBQ(13~}<2uOEOQXc6>Rm`b6&SK5)g>A+==v9_6vxS_H)ejjam~3F5?-8pE
bsMuWUe&z&*#?Xrd32h)z-QmkdPa#@bJJ&Sj

literal 0
HcmV?d00001

diff --git a/data_files/ec_256_prv.sec1.pem b/data_files/ec_256_prv.sec1.pem
new file mode 100644
index 000000000..69b02225a
--- /dev/null
+++ b/data_files/ec_256_prv.sec1.pem
@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIHnN8ULAX3r6RNctg8/Hfll6p/QgJXJ6Y4XgsLeJbWV8oAoGCCqGSM49
+AwEHoUQDQgAECEh3UFIe6UZVzKk6zmLN74VtxjvoVZYxs4WckNUPGSaYbGCf7xGr
+DKjYXOp+5gSGxtCLBAltIFHd4ctGTyFaWg==
+-----END EC PRIVATE KEY-----

From 8f8fbfabc17317eb54ab731571fcb8897b650ce3 Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Fri, 10 Oct 2025 14:54:50 +0200
Subject: [PATCH 2/7] data_files: add EC public key file for secp256r1 in RFC
 5480 and DER format

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/Makefile       |   4 ++++
 data_files/ec_256_pub.der | Bin 0 -> 91 bytes
 2 files changed, 4 insertions(+)
 create mode 100644 data_files/ec_256_pub.der

diff --git a/data_files/Makefile b/data_files/Makefile
index ce161dcae..476c56142 100644
--- a/data_files/Makefile
+++ b/data_files/Makefile
@@ -1752,6 +1752,10 @@ ec_256_pub.comp.pem: ec_256_pub.pem
 	$(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
 all_final += ec_256_pub.comp.pem
 
+ec_256_pub.der: ec_256_prv.sec1.der
+	$(OPENSSL) ec -in $< -outform DER -pubout -out $@
+all_final += ec_256_pub.der
+
 ec_384_pub.comp.pem: ec_384_pub.pem
 	$(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
 all_final += ec_384_pub.comp.pem
diff --git a/data_files/ec_256_pub.der b/data_files/ec_256_pub.der
new file mode 100644
index 0000000000000000000000000000000000000000..91056e4b5a1dbbde8c5b08e153c6002ae0dc591b
GIT binary patch
literal 91
zcmXqrG!SNE*J|@PXUoLM#sOw9GqN)~F|crWlm`UKy>tsbv(oBZ(%JW|xyP(ugibTu
u+&X8%Renje8952_-wUqhS#cxgRoyd|wqqB%SvYeQ0`ERN?dGo-6$Jo^vm@33

literal 0
HcmV?d00001


From 3b52387aef85405b4cde840f93701a3a710e357c Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Fri, 10 Oct 2025 17:11:44 +0200
Subject: [PATCH 3/7] data_files: add files for EC secp256r1 with PKCS8 and
 DER/PEM formats

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/Makefile           | 7 +++++++
 data_files/ec_256_prv.pk8.der | 5 +++++
 data_files/ec_256_prv.pk8.pem | 5 +++++
 3 files changed, 17 insertions(+)
 create mode 100644 data_files/ec_256_prv.pk8.der
 create mode 100644 data_files/ec_256_prv.pk8.pem

diff --git a/data_files/Makefile b/data_files/Makefile
index 476c56142..48e836773 100644
--- a/data_files/Makefile
+++ b/data_files/Makefile
@@ -1635,6 +1635,10 @@ ec_prv.pk8.der:
 	$(OPENSSL) genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime192v1 -pkeyopt ec_param_enc:named_curve -out $@ -outform DER
 all_final += ec_prv.pk8.der
 
+ec_256_prv.pk8.der:
+	$(OPENSSL) genpkey -algorithm EC -pkeyopt ec_paramgen_curve:prime256v1 -pkeyopt ec_param_enc:named_curve -out $@ -outform DER
+all_final += ec_256_prv.pk8.der
+
 # ### Instructions for creating `ec_prv.pk8nopub.der`,
 # ### `ec_prv.pk8nopubparam.der`, and `ec_prv.pk8param.der` by hand from
 # ### `ec_prv.pk8.der`.
@@ -1694,6 +1698,9 @@ all_final += ec_prv.pk8.der
 ec_prv.pk8.pem: ec_prv.pk8.der
 	$(OPENSSL) pkey -in $< -inform DER -out $@
 all_final += ec_prv.pk8.pem
+ec_256_prv.pk8.pem: ec_256_prv.pk8.der
+	$(OPENSSL) pkey -in $< -outform PEM -out $@
+all_final += ec_256_prv.pk8.pem
 ec_prv.pk8nopub.pem: ec_prv.pk8nopub.der
 	$(OPENSSL) pkey -in $< -inform DER -out $@
 all_final += ec_prv.pk8nopub.pem
diff --git a/data_files/ec_256_prv.pk8.der b/data_files/ec_256_prv.pk8.der
new file mode 100644
index 000000000..5f7c3a5c9
--- /dev/null
+++ b/data_files/ec_256_prv.pk8.der
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgfudpOVgKLbhYchqT
+OKGwquNHzbXu6Ftboqiz+7vWkFShRANCAASnNM81vPFrIDRSxd9q1KdnmCEKYY+f
+9cAHHHwPyWm6JIUGtE8dKTR15ECaVosFCUNuhS3ZZ7yJepqXUXISbMO5
+-----END PRIVATE KEY-----
diff --git a/data_files/ec_256_prv.pk8.pem b/data_files/ec_256_prv.pk8.pem
new file mode 100644
index 000000000..5f7c3a5c9
--- /dev/null
+++ b/data_files/ec_256_prv.pk8.pem
@@ -0,0 +1,5 @@
+-----BEGIN PRIVATE KEY-----
+MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgfudpOVgKLbhYchqT
+OKGwquNHzbXu6Ftboqiz+7vWkFShRANCAASnNM81vPFrIDRSxd9q1KdnmCEKYY+f
+9cAHHHwPyWm6JIUGtE8dKTR15ECaVosFCUNuhS3ZZ7yJepqXUXISbMO5
+-----END PRIVATE KEY-----

From c0011b357473fb320e4165d974ab71c16d7ed412 Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Thu, 23 Oct 2025 18:25:57 +0200
Subject: [PATCH 4/7] data_files: fix Makefile's target commands for EC secp256
 curves

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/Makefile | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/data_files/Makefile b/data_files/Makefile
index 48e836773..8da980f1c 100644
--- a/data_files/Makefile
+++ b/data_files/Makefile
@@ -1854,14 +1854,13 @@ ec_256_prv.sec1.der:
 	$(OPENSSL) ecparam -name prime256v1 -genkey -outform DER -noout -out $@
 all_final += ec_256_prv.sec1.der
 
-ec_256_prv.sec1.pem:
+ec_256_prv.sec1.pem: ec_256_prv.sec1.der
 	$(OPENSSL) ec -in $< -out $@ -outform PEM
 all_final += ec_256_prv.sec1.pem
 
-ec_256_prv.sec1.comp.pem:
-	$(OPENSSL) ec -in $< -out $@ -outform PEM
+ec_256_prv.sec1.comp.pem: ec_256_prv.sec1.der
 	$(OPENSSL) ec -in $< -conv_form compressed -outform PEM -out $@
-all_final += ec_256_prv.sec1.pem
+all_final += ec_256_prv.sec1.comp.pem
 
 ec_256_long_prv.der: ec_256_long_prv.pem
 	$(OPENSSL) pkey -in $< -out $@ -outform DER

From c1be4dc753339f80cc01f4009a71d766306ca26c Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Thu, 23 Oct 2025 23:10:57 +0200
Subject: [PATCH 5/7] data_files: fix format of ec_256_prv.pk8.der

Previously the file format was PEM even though the extension suggests it
should be DER. This commit set the correct format.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/ec_256_prv.pk8.der | Bin 241 -> 121 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/data_files/ec_256_prv.pk8.der b/data_files/ec_256_prv.pk8.der
index 5f7c3a5c9c40d70b8fde21e4197fe393faa7c772..f5a31f918976f4945941c74aeb7b70923e09062e 100644
GIT binary patch
literal 121
zcmV-<0EYiCcLD(c1R(tDeq$K8Vv>;u7q!}d|D<%D<qwAd?)!4R)(^>;{dJ%U1_&yK
zNX|V20SBQ(13~}<p<7y36^-RmOm^X8b+oiE&V$7Sh;ql<9$$;&l<TY^70-YLjsg!n
bMv~bDYc>9+t-oXgQ(5c3Xx6BSP!I2<cl<V4

literal 241
zcmZXPyOM%17)E=Z!rozK8P^MC5`U7IO+W$&b|Ne6?0AWa5ue`6*m<h&eBE)~2N)<<
zy(s1xN}wm8c%H5!Ic2B@B(bEpGgQlO|KXI7_qM<={jw{|F`CcoO<NtptQJ3IQ>+`4
zIH91{w2Ixzyd4GSa&P`_{qbe-ALu4ViXfzSN>02>6dd_9*4N56o~U+P0-`AT8^>QG
z#+Z$|#db8~DLuoa5=rb0fvmFqDIlq88$DPq$KCArVDdEQx|HG2c?E!)en#B^a;Hf6


From a7de749187ec83642f0144364a89a4ec3110f736 Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Thu, 23 Oct 2025 23:53:11 +0200
Subject: [PATCH 6/7] data_files: remove duplicate of ec_256 files and
 regorganize

- there was already a SEC1 formatted EC file for secp256r1 so
  ec_256_prv.sec1.der was useless;
- all other ec_256_[pub|priv] files should be generated starting from
  ec_256_prv.pem

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/Makefile            |  20 ++++++--------------
 data_files/ec_256_prv.der      | Bin 0 -> 121 bytes
 data_files/ec_256_prv.sec1.der | Bin 121 -> 0 bytes
 data_files/ec_256_pub.der      | Bin 91 -> 91 bytes
 4 files changed, 6 insertions(+), 14 deletions(-)
 create mode 100644 data_files/ec_256_prv.der
 delete mode 100644 data_files/ec_256_prv.sec1.der

diff --git a/data_files/Makefile b/data_files/Makefile
index 8da980f1c..32def1ba4 100644
--- a/data_files/Makefile
+++ b/data_files/Makefile
@@ -1759,10 +1759,6 @@ ec_256_pub.comp.pem: ec_256_pub.pem
 	$(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
 all_final += ec_256_pub.comp.pem
 
-ec_256_pub.der: ec_256_prv.sec1.der
-	$(OPENSSL) ec -in $< -outform DER -pubout -out $@
-all_final += ec_256_pub.der
-
 ec_384_pub.comp.pem: ec_384_pub.pem
 	$(OPENSSL) ec -pubin -in $< -out $@ -conv_form compressed
 all_final += ec_384_pub.comp.pem
@@ -1850,17 +1846,13 @@ ec_prv.sec1.der: ec_prv.sec1.pem
 	$(OPENSSL) pkey -in $< -out $@ -outform DER
 all_final += ec_prv.sec1.der
 
-ec_256_prv.sec1.der:
-	$(OPENSSL) ecparam -name prime256v1 -genkey -outform DER -noout -out $@
-all_final += ec_256_prv.sec1.der
+ec_256_prv.der: ec_256_prv.pem
+	$(OPENSSL) pkey -in $< -out $@ -outform DER
+all_final += ec_256_prv.pem
 
-ec_256_prv.sec1.pem: ec_256_prv.sec1.der
-	$(OPENSSL) ec -in $< -out $@ -outform PEM
-all_final += ec_256_prv.sec1.pem
-
-ec_256_prv.sec1.comp.pem: ec_256_prv.sec1.der
-	$(OPENSSL) ec -in $< -conv_form compressed -outform PEM -out $@
-all_final += ec_256_prv.sec1.comp.pem
+ec_256_pub.der: ec_256_prv.pem
+	$(OPENSSL) pkey -in $< -outform DER -pubout -out $@
+all_final += ec_256_pub.der
 
 ec_256_long_prv.der: ec_256_long_prv.pem
 	$(OPENSSL) pkey -in $< -out $@ -outform DER
diff --git a/data_files/ec_256_prv.der b/data_files/ec_256_prv.der
new file mode 100644
index 0000000000000000000000000000000000000000..e65d3cd65745729b14ddecceb878a255bf27e2d3
GIT binary patch
literal 121
zcmV-<0EYiCcLD(c1RzPtsKJa&h*mhnG0z?G$&?co3AKRK{X?M2v3;`fKJK6j1_&yK
zNX|V20SBQ(13~}<cXDNKflE1(dDY?Zcpt2937R}yp|ImqQG-hewq6TYC6LXpk9Lz`
byz@%W!5&@*PJ|}C-UPmGWjRGemKWYd2gNh8

literal 0
HcmV?d00001

diff --git a/data_files/ec_256_prv.sec1.der b/data_files/ec_256_prv.sec1.der
deleted file mode 100644
index e1da3985b4799d5e3a0d36b8a6fe4b436453d0c5..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 121
zcmV-<0EYiCcLD(c1R#0M@j}2~diq4yErZX;epz~_^dKd2dSiv)u(yeAWqhCt1_&yK
zNX|V20SBQ(13~}<2uOEOQXc6>Rm`b6&SK5)g>A+==v9_6vxS_H)ejjam~3F5?-8pE
bsMuWUe&z&*#?Xrd32h)z-QmkdPa#@bJJ&Sj

diff --git a/data_files/ec_256_pub.der b/data_files/ec_256_pub.der
index 91056e4b5a1dbbde8c5b08e153c6002ae0dc591b..2ba259538d55d60a1d89a19c3a558e19c0997886 100644
GIT binary patch
delta 69
zcmV-L0J{HMTaX(-cXDNKflE1(dDY?Zcpt2937R}yp|ImqQG-hewq6TYC6LXpk9Lz`
byz@%W!5&@*PJ|}C-UPmGWjRGemKWYdLvkM%

delta 69
zcmV-L0J{HMTaX(-2uOEOQXc6>Rm`b6&SK5)g>A+==v9_6vxS_H)ejjam~3F5?-8pE
bsMuWUe&z&*#?Xrd32h)z-QmkdPa#@bRQDh=


From 4fb0db47d08b51146fdbafb0ab683d6efa4304df Mon Sep 17 00:00:00 2001
From: Valerio Setti <vsetti@baylibre.com>
Date: Tue, 4 Nov 2025 12:02:33 +0100
Subject: [PATCH 7/7] data_files: remove unnecessary ec_256_prv.sec1[.comp].pem
 files

Their generation was removed from the Makefile, but physical files were
not deleted.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>
---
 data_files/ec_256_prv.sec1.comp.pem | 4 ----
 data_files/ec_256_prv.sec1.pem      | 5 -----
 2 files changed, 9 deletions(-)
 delete mode 100644 data_files/ec_256_prv.sec1.comp.pem
 delete mode 100644 data_files/ec_256_prv.sec1.pem

diff --git a/data_files/ec_256_prv.sec1.comp.pem b/data_files/ec_256_prv.sec1.comp.pem
deleted file mode 100644
index 86bfed8d0..000000000
--- a/data_files/ec_256_prv.sec1.comp.pem
+++ /dev/null
@@ -1,4 +0,0 @@
------BEGIN EC PRIVATE KEY-----
-MFcCAQEEIHnN8ULAX3r6RNctg8/Hfll6p/QgJXJ6Y4XgsLeJbWV8oAoGCCqGSM49
-AwEHoSQDIgACCEh3UFIe6UZVzKk6zmLN74VtxjvoVZYxs4WckNUPGSY=
------END EC PRIVATE KEY-----
diff --git a/data_files/ec_256_prv.sec1.pem b/data_files/ec_256_prv.sec1.pem
deleted file mode 100644
index 69b02225a..000000000
--- a/data_files/ec_256_prv.sec1.pem
+++ /dev/null
@@ -1,5 +0,0 @@
------BEGIN EC PRIVATE KEY-----
-MHcCAQEEIHnN8ULAX3r6RNctg8/Hfll6p/QgJXJ6Y4XgsLeJbWV8oAoGCCqGSM49
-AwEHoUQDQgAECEh3UFIe6UZVzKk6zmLN74VtxjvoVZYxs4WckNUPGSaYbGCf7xGr
-DKjYXOp+5gSGxtCLBAltIFHd4ctGTyFaWg==
------END EC PRIVATE KEY-----