talos jwk generate ecdsa

talos jwk generate ecdsa

Generate an ECDSA key pair

Synopsis

Generate an ECDSA key pair using the specified elliptic curve. Key size is determined by the curve: P-256 (256-bit), P-384 (384-bit), P-521 (521-bit). Default curve: P-256.

talos jwk generate ecdsa [flags]

Examples

  # Generate P-256 key (default)
  talos jwk generate ecdsa -o ecdsa-key.json

  # Generate P-384 key with custom key ID
  talos jwk generate ecdsa --curve P-384 --kid prod-ec-key -o ecdsa-p384.json

  # Generate P-521 key
  talos jwk generate ecdsa --curve P-521 -o ecdsa-p521.json

Options

      --curve string    Elliptic curve (P-256, P-384, P-521) (default "P-256")
  -h, --help            help for ecdsa
      --jwks            Output as JWKS (JSON Web Key Set)
      --kid string      Key ID (RFC 7638 JWK thumbprint used if not provided)
  -o, --output string   Output file (writes to stdout if not specified)
      --public-only     Output public key only
      --use string      Key usage: 'sig' for signing, 'enc' for encryption (default: sig)

Options inherited from parent commands

      --config string     path to a config file (without it, only schema defaults and TALOS_-prefixed env vars apply)
  -e, --endpoint string   HTTP server base URL including scheme, e.g. http://host:port (for client commands) (default "http://localhost:4420")

See also

• talos jwk generate Generate a new JWK key