> this stores 104 bytes with an NID_secp384r1 key Yes, this was a pure brainf^Wscrewup on my part, sorry.
> EVP_MAX_MD_SIZE seems to be about digests, not signatures. Did you > have a different constant in mind or did you get confused by the > poorly worded variable? Yes, you're right, I just confused myself. > What would be the correct calculation for a GF2m field? Should I maybe just > ignore it? RFC 7518 only lists P-256, P-384 and P-521 (and I think > Let's Encrypt only supports P-384 anyway), and they are all GFp, no? Yes, they're all curves over prime fields, so all is well. Just ignore this comment.