Add support for P-384, also known as secp384r1

README.md

@@ -28,6 +28,7 @@ Supported password/key types:
   * `seed` - generates a seed file, which can be used with `-s` option later
   * `raw` - generates 32 random bytes (can be used as a symmetric key)
   * `ec256` - generates ECC P-256 private key
+  * `ec384` - generates ECC P-384 private key
   * `ec521` - generates ECC P-521 private key
   * `rsa2048` - generates 2048-bit RSA private key
   * `rsa4096` - generates 4096-bit RSA private key

cmd/gokey/main.go

@@ -24,7 +24,7 @@ var (
 func init() {
 	flag.StringVar(&pass, "p", "", "master password (if not specified, will be asked interactively)")
 	flag.StringVar(&passFile, "P", "", "master password file (if not specified, will be asked interactively)")
-	flag.StringVar(&keyType, "t", "pass", "output type (can be pass, seed, raw, ec256, ec521, rsa2048, rsa4096, x25519, ed25519)")
+	flag.StringVar(&keyType, "t", "pass", "output type (can be pass, seed, raw, ec256, ec384, ec521, rsa2048, rsa4096, x25519, ed25519)")
 	flag.StringVar(&seedPath, "s", "", "path to master seed file (optional)")
 	flag.IntVar(&seedSkipCount, "skip", 0, "number of bytes to skip from master seed file (default 0)")
 	flag.StringVar(&realm, "r", "", "password/key realm (most probably purpose of the password/key)")
@@ -35,6 +35,7 @@ func init() {
 
 var keyTypes = map[string]gokey.KeyType{
 	"ec256":   gokey.EC256,
+	"ec384":   gokey.EC384,
 	"ec521":   gokey.EC521,
 	"rsa2048": gokey.RSA2048,
 	"rsa4096": gokey.RSA4096,

gokey.1.md

@@ -64,6 +64,7 @@ operation* below)
     * *seed* - generates a seed file, which can be used with **-s** option later
     * *raw* - generates 32 random bytes (can be used as a symmetric key)
     * *ec256* - generates ECC P-256 private key
+    * *ec384* - generates ECC P-384 private key
     * *ec521* - generates ECC P-521 private key
     * *rsa2048* - generates 2048-bit RSA private key
     * *rsa4096* - generates 4096-bit RSA private key

gokey_test.go

@@ -164,6 +164,7 @@ func testGetKeyType(kt KeyType, t *testing.T) {
 
 func TestGetKey(t *testing.T) {
 	testGetKeyType(EC256, t)
+	testGetKeyType(EC384, t)
 	testGetKeyType(EC521, t)
 	testGetKeyType(RSA2048, t)
 	testGetKeyType(RSA4096, t)

keygen.go

@@ -17,6 +17,7 @@ type KeyType int
 
 const (
 	EC256 KeyType = iota
+	EC384
 	EC521
 	RSA2048
 	RSA4096
@@ -175,6 +176,8 @@ func (keygen *KeyGen) generateEc(kt KeyType) (crypto.PrivateKey, error) {
 	switch kt {
 	case EC256:
 		curve = elliptic.P256()
+	case EC384:
+		curve = elliptic.P384()
 	case EC521:
 		curve = elliptic.P521()
 	default:
@@ -206,7 +209,7 @@ func (keygen *KeyGen) generate25519(kt KeyType) (crypto.PrivateKey, error) {
 
 func (keygen *KeyGen) GenerateKey(kt KeyType) (crypto.PrivateKey, error) {
 	switch kt {
-	case EC256, EC521:
+	case EC256, EC384, EC521:
 		return keygen.generateEc(kt)
 	case RSA2048, RSA4096:
 		return keygen.generateRsa(kt)