Announcing ECDSA P-256 support
a day ago
- ECDSA P-256 support is now available for response, webhook, and license/machine file signatures.
- A new ecdsa-p256 signing algorithm and ECDSA_P256_SIGN scheme for signed keys have been introduced.
- ECDSA P-256 is a NIST standard approved under FIPS 140-3, offering stronger security and greater efficiency than RSA 2048.
- It produces smaller signatures, reduces bandwidth, and verifies faster on constrained devices.
- Ed25519 is still recommended for most cases but is not NIST-approved; ECDSA P-256 is the compliant alternative for organizations needing NIST/FIPS validation.
- RSA 2048 is being phased out by 2030 per NIST recommendations.