Add full XCA curve and digest parity

2026-10-26 03:45:25 +00:00
parent b910fa706c
commit d5f060cbf0
36 changed files with 4326 additions and 331 deletions
@@ -1,7 +1,9 @@
 # kca-core

-Pure, I/O-free PKI domain logic for KCA. It knows how to generate and parse
-keys, build distinguished names, encode X.509 extensions, issue certificates,
-create CSRs and CRLs, apply templates, and convert every supported import and
-export format. It has no kaya, database or filesystem dependencies and is
-unit-tested in isolation.
+Pure PKI domain logic for KCA. It knows how to generate and parse keys, build
+distinguished names, encode X.509 extensions, issue certificates, create CSRs
+and CRLs, apply templates, and convert every supported import and export
+format. It has no kaya or database dependencies and is unit-tested in
+isolation. Native operations use `cryptography`; an in-memory CFFI/OpenSSL 3
+backend supports XCA's legacy named curves and signature hashes without
+private-key temporary files or command-line tools.