Generate a public/private key pair

Generate ECDSA signing keys using secp256r1 curve parameters (also known as prime256v1 or NIST P-256).

To generate a public/private key pair using OpenSSL, run the following command:

openssl ecparam -name prime256v1 -genkey -outform pem -out keypair.pem

To extract the private key from the key pair generated above:

openssl pkcs8 -topk8 -inform pem -in pair.pem -outform pem -nocrypt -out private.pem

To extract the public key from the key pair generated above:

openssl ec -in keypair.pem -pubout -out public.pem