pguecc

uECC bindings for Postgres

Overview

PackageVersionCategoryLicenseLanguage
pg_ecdsa1.0UTILBSD 2-ClauseC
IDExtensionBinLibLoadCreateTrustRelocSchema
4460pgueccNoYesNoYesNoYes-
Relatedhashlib shacrypt cryptint pgcrypto gzip bzip zstd http

Version

TypeRepoVersionPG VerPackageDeps
EXTPIGSTY1.01817161514pg_ecdsa-
RPMPIGSTY1.01817161514pg_ecdsa_$v-
DEBPIGSTY1.01817161514postgresql-$v-pg-ecdsa-
OS / PGPG18PG17PG16PG15PG14
el8.x86_64
el8.aarch64
el9.x86_64
el9.aarch64
el10.x86_64
el10.aarch64
d12.x86_64
d12.aarch64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
d13.x86_64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
d13.aarch64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
u22.x86_64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
u22.aarch64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
u24.x86_64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
u24.aarch64
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0
PIGSTY 1.0

Build

You can build the RPM / DEB packages for pg_ecdsa using pig build:

pig build pkg pg_ecdsa         # build RPM / DEB packages

Install

You can install pg_ecdsa directly. First, make sure the PGDG and PIGSTY repositories are added and enabled:

pig repo add pgsql -u          # Add repo and update cache

Install the extension using pig or apt/yum/dnf:

pig install pg_ecdsa;          # Install for current active PG version
pig ext install -y pg_ecdsa -v 18  # PG 18
pig ext install -y pg_ecdsa -v 17  # PG 17
pig ext install -y pg_ecdsa -v 16  # PG 16
pig ext install -y pg_ecdsa -v 15  # PG 15
pig ext install -y pg_ecdsa -v 14  # PG 14
dnf install -y pg_ecdsa_18       # PG 18
dnf install -y pg_ecdsa_17       # PG 17
dnf install -y pg_ecdsa_16       # PG 16
dnf install -y pg_ecdsa_15       # PG 15
dnf install -y pg_ecdsa_14       # PG 14
apt install -y postgresql-18-pg-ecdsa   # PG 18
apt install -y postgresql-17-pg-ecdsa   # PG 17
apt install -y postgresql-16-pg-ecdsa   # PG 16
apt install -y postgresql-15-pg-ecdsa   # PG 15
apt install -y postgresql-14-pg-ecdsa   # PG 14

Create Extension:

CREATE EXTENSION pguecc;

Usage

pguecc: Elliptic curve cryptography (micro-ecc bindings) for PostgreSQL

Requires the pgcrypto extension.

Generate Key Pair

SELECT ecdsa_make_key('secp256k1');
-- (public_key_hex, private_key_hex)

Sign Data

SELECT ecdsa_sign(
    '000000000000000000000000000000000000000000',  -- private key (hex)
    '1234',                                          -- data to sign
    'sha256',                                        -- hash function
    'secp160r1'                                      -- curve name
);

Verify Signature

SELECT ecdsa_verify(
    '<public_key_hex>',
    'hello, world',
    '<signature_hex>',
    'sha256',
    'secp256k1'
);
-- t

Key Validation

SELECT ecdsa_is_valid_public_key('<public_key_hex>', 'secp256k1');
SELECT ecdsa_is_valid_private_key('<private_key_hex>', 'secp256k1');
SELECT ecdsa_is_valid_curve('secp256k1');  -- true

Supported Curves

secp160r1, secp192r1, secp224r1, secp256r1, secp256k1

Raw API

For direct signing without hashing (use with caution):

SELECT ecdsa_sign_raw(private_key_bytea, hash_bytea, 'secp256k1');
SELECT ecdsa_verify_raw(public_key_bytea, hash_bytea, signature_bytea, 'secp256k1');

Last Modified 2026-03-12: add pg extension catalog (95749bf)