ECDSA Key Generator
Generate an ECDSA key pair on P-256, P-384, or P-521.
Generate an ECDSA key pair on P-256, P-384, or P-521 and export as PEM. Free, offline. Read more Show less
What is ECDSA?
ECDSA (Elliptic Curve Digital Signature Algorithm) produces smaller keys and signatures than RSA at equivalent security levels. A 256-bit EC key provides roughly the same security as a 3072-bit RSA key. ECDSA is used in TLS, Bitcoin, and modern protocols.
This tool supports the three curves recommended by NIST: P-256 (secp256r1), P-384 (secp384r1), and P-521 (secp521r1).
How to use
Choose a curve. P-256 is the default and most widely supported. Click Generate.
Keys are exported as PEM. The private key is PKCS#8 and the public key is SPKI, both compatible with OpenSSL and other standard tools.
FAQ
Are my keys sent anywhere?
No. Generation is entirely local.
Which curve should I use?
P-256 unless you need the extra security margin of P-384 or P-521. P-256 is universally supported.
Can I import them into OpenSSL?
Yes. The output is standard PKCS#8 and SPKI PEM, readable by OpenSSL, Node.js, Python cryptography, and Java.